last executing test programs: 28m8.953808255s ago: executing program 32 (id=166): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) close(r3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") llistxattr(0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x9de7, 0x19, 0x200002, 0x4, 0x6, "afcdce3c85b9799bd253587aed1706803500", 0x6, 0x6}) 27m53.788572435s ago: executing program 33 (id=178): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) alarm(0xc8aa9c0000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 25m15.510908083s ago: executing program 34 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 24m43.162799052s ago: executing program 35 (id=263): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2008052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@bsdgroups}]}, 0x3, 0x4cf, &(0x7f0000000740)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0xb0, 0x0, 0x178, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x100, 0x20080000, 0x5, 0x2, 0x400, 0xffffadba, 0x100, 0x7]}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x84c, 0x816, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x2}, {0x4, 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 24m22.938208861s ago: executing program 6 (id=268): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="b4800000301f000000ff0f000000000000008219000000005d8cd85a5a707997c182fb21107f5e25227908344159b639141893f783443aafd2c9b50e7b60286ad07f514e3dc311439737b0c13d39ef1f8f76bd9501d29b385416c2fa6a5dffb44ed54d3cbeeb2fc8cdf663113bfc1e1e01319fa98f7a1807c4e94d9c53403a400655e79dda201d69a65cc88fd53ebb6b256d968894c2bd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1700000000000000040000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ed819d00040000000000000000000000000b00000000000000000e00027119dc"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x3b000000, @private2, 0x5}}}, 0x88) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='tracefs\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r8 = syz_open_pts(r7, 0x141601) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x3) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r10}, &(0x7f00000000c0)=0x7d8, 0x0}, 0x20) 24m17.194834236s ago: executing program 6 (id=272): syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="e3875d521f5532124979134cee223e3b811021bfe1f72c45dffda9ca1c0ed71b1140ce4294b7128da40685c173b8aef0a8d1deea7da01bcb5130b02b4d199c24d4f64a2cabf05df6cb8b5bb31f16f0b3242109414fa7d4117548b88b42e4aeee291a40d33563c7808461dc72cd2f6d6cc7b3c9ae9bf60362ad54bd3677a94fb74b6907d6d3d00e4385b2459f3fbf1a9512f9858a9342bd773a080587bf66016cf54549cb76958043b5d865b6435b56df4a2be99aff0f40456cb1fc14e35948a3db27be2c8f84e5276f", @ANYRES16], 0xff, 0x6de, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40041, 0x141) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./cgroup\x00', 0x400, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) 24m16.089236651s ago: executing program 6 (id=275): chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, 0x0, 0x0, 0x5, 0xd8, &(0x7f0000000540)=""/216, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x464a2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 24m13.037872169s ago: executing program 6 (id=277): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) 23m59.809040064s ago: executing program 6 (id=289): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40142, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x339, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x40be, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000005fc0)={@remote, @empty, @empty, 0x7, 0x8000, 0x40, 0x400, 0x5, 0x18c0012, r9}) 23m55.238544461s ago: executing program 6 (id=291): socket(0x1, 0x803, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x218018, &(0x7f0000000f40)=ANY=[@ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f72676574006769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRESOCT=0x0, @ANYBLOB="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"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r1, &(0x7f0000005c80), 0x0, 0xc00000) 23m39.37915603s ago: executing program 36 (id=291): socket(0x1, 0x803, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x218018, &(0x7f0000000f40)=ANY=[@ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f72676574006769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRESOCT=0x0, @ANYBLOB="7569443d9be3499fa8bff3c3a76c9a41f29175eb9cd8cd24c60ee221c4a0e15bafdbc250b4986d8b2fcc8fb756f29da8418bb774896c1ae6c42d84e4e3169f41208228b07785f60d06b4b922faefe37441d0821c95c5191a7f8f24ede9444ce0824be1e69f52e06e80955c7f7e8179717c7ce030ed3ed488ee641f1dc4282fbd51ba010663fabfefc597ad37a9c8751aa5bdc9d90000f57a7c2c385acf4130cbb5820dfadf3ef15f327160e3dbf95522b70e0f0b1e5bc3480d4bfafa2ad4a81eebf0c33fe7532667cb8f5834e899d19ea92be68efce83da5118258bb95b8320888fdfdb46fce5c9e193acb0a41d63b812b4f6726c8cb37fa627189628e55ed3648a9841f60fb8a78ebec26a24d378d57c84bc2711e54471e7f72f42b9639e919494416e4"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r1, &(0x7f0000005c80), 0x0, 0xc00000) 20m46.613842917s ago: executing program 7 (id=450): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) recvmmsg(r3, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000040)=0xf2b, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r0, r5, 0x0, 0x7ffff004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20m43.433256009s ago: executing program 7 (id=452): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000200)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6ff6db36ce966e756d746169"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ftruncate(r1, 0x8) sync_file_range(r1, 0x63, 0x9fd, 0x4) 20m41.734024894s ago: executing program 7 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpid() r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x28}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000080), 0x4000000000000e6, 0x40040) fcntl$setstatus(r7, 0x4, 0x42000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003200080095f0ff00000000007269e997d89b400a89ee791574675691ec5722786b77e2fde2022d30a72db468b47aa2f894241b51315fbd0dc43d4ed33d4b0cb780be5726ae66672bc47217ba4279b8da0b7b7778ff487fa625ad2d07000000ee159cf2461557180f93623f428b04ad1c7a670d2733f4d49988aa166e9758a9f404e264eb6fe17801cb038c69debb4916498cec587932b57ef3e6cdddc9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r8, &(0x7f0000001b40)={0x2020}, 0x2020) 20m39.819410345s ago: executing program 7 (id=457): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) gettid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000004c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) 20m34.085567809s ago: executing program 7 (id=461): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40142, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x339, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x40be, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @empty, @empty, 0x7, 0x8000, 0x40, 0x400, 0x5, 0x18c0012}) 20m26.043355987s ago: executing program 7 (id=467): open(0x0, 0x2000, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bind$bt_hci(r5, 0x0, 0x0) 20m16.236520693s ago: executing program 4 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100001002dbd7000fbdbdf25000000008314fabb78238b1ac9dbe595dc56715be8f022a8b6fc63698dd23a6903e52bd71f9cd6d2d1bfd314fa0cff41bbdbf6b04f116a8d7c77ccafeefd4017232b92f8c305709bfd9334c046534e27be721083c18a8515dda1a860a0a34c522b5e12b1c1721729b33abb5e4e7f4b414a4c40887d7359db339d4af52591b5ad704770c6921ae222", @ANYRES32=0x0, @ANYBLOB="18430100a1a20100140003007866726d30000000000000000000000010001a800c000a8005000800020000000500270003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x600c845}, 0xc0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 20m10.220048395s ago: executing program 37 (id=467): open(0x0, 0x2000, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bind$bt_hci(r5, 0x0, 0x0) 20m10.200013936s ago: executing program 4 (id=479): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', 0x0, 0x0, 0x0, 0x1) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x625, 0x70bd2b, 0x25d7dffd, {0x0, 0x0, 0x0, 0x0, 0xb430f12d3e07b589, 0x15002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c9}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfdfffffb, 0x2004, 0x3, 0x0, 0xf250, 0x82, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffc0000, 0x4, 0x6, 0x1001, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0xc89, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x6, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2007, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x0, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x8, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x400, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 20m5.444668079s ago: executing program 4 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001a40)={0x15, 0x21, &(0x7f0000000a40)="d4f903313d4e83a8833727dcf0fde7f0211db712fe2a4a291160dc18ea7ba644b1"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 20m5.077248071s ago: executing program 4 (id=484): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40142, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x339, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x40be, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @empty, @empty, 0x7, 0x8000, 0x40, 0x400, 0x5, 0x18c0012}) 20m1.908442993s ago: executing program 4 (id=488): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) gettid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000004c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x2ea, 0x0) r3 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_create(0x11ffffe) 19m59.409336753s ago: executing program 4 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x200) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xbee}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) 19m58.711109625s ago: executing program 38 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x200) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xbee}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) 12m19.439026622s ago: executing program 5 (id=937): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528", 0x94, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 12m17.404767357s ago: executing program 5 (id=940): prlimit64(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 12m15.821249518s ago: executing program 5 (id=942): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 12m12.341390859s ago: executing program 5 (id=945): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x44000160) r3 = dup(r1) inotify_rm_watch(r3, r2) 12m7.581300782s ago: executing program 5 (id=951): ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) lseek(r0, 0x6, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) 12m4.756772683s ago: executing program 5 (id=953): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 11m48.927886171s ago: executing program 39 (id=953): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 9m28.26931216s ago: executing program 8 (id=1089): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40142, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x339, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) 9m27.559943093s ago: executing program 8 (id=1090): r0 = io_uring_setup(0x68f6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) close_range(r0, 0xffffffffffffffff, 0x0) 9m26.38140584s ago: executing program 8 (id=1091): socket(0x400000000010, 0x3, 0x0) io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup(r1) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x176, &(0x7f0000000000)="$eJzskj9OAkEUxr9Zlj9aGEmsaCCRGCyUZVFjbLTE3gNIcEXiosKSKIRijTEUFsbSE3ANEy+ghfEA1BTE2oyZ2bfj4BWcX8G38837M++Fs6ATpAF8z4YNHECSwBLeGYMNIM8ib2pF+kT6Qco550LfKO6Q/DvSXIAM4Ptet7BXQFYY/cF5XRoAvqSnrGD/1sJUlvqcDRvi41hrwqmJHpMA0NFicjawIofgKsbGL+Ve+6oc9AcbrXa96TW9C9et7jhbjrPtlk9bvudEv0xrYclyoi2wDkDsa0G7TwK4p83NkwfTniZYBJiemwLwSHel1flsSx+dlOFF5aYB1fUIa2LRuA6Z5hZlFRtypBoYEnSoxCthqldGXmw2Lv2TERhYnDaGrWpUJkiqg6sfqrth/OwRaZG0RjomncTL+fOXSSKLEA90KoVACjf1Xq9bEUuKvpTnKs9dDvWFia7P1vxwrxYMBoPBYDAYDAaD4b/zEwAA//9yiHzx") userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0xffffff4c}]) 9m17.91736771s ago: executing program 8 (id=1098): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) r3 = semget$private(0x0, 0x0, 0x201) semop(r3, &(0x7f0000000140)=[{0x0, 0xfffb}], 0x1) semop(r3, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001"], 0x80}}, 0x0) 9m14.005347045s ago: executing program 8 (id=1101): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x5609, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x339, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x40be, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/105, 0x69) 9m7.829348531s ago: executing program 8 (id=1107): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) gettimeofday(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80004000, 0xfefffffe}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 8m51.783843692s ago: executing program 40 (id=1107): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) gettimeofday(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80004000, 0xfefffffe}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @auto="e4c858f988c79593"}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 6m33.777344885s ago: executing program 0 (id=1240): r0 = io_uring_setup(0x601c, &(0x7f0000000080)={0x0, 0xb71c, 0x10, 0x3, 0x100134}) close_range(r0, r0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) 6m32.425239198s ago: executing program 0 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000046000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x105, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) read$msr(r1, &(0x7f0000000580)=""/245, 0xf5) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) 6m30.183287989s ago: executing program 0 (id=1249): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003700), 0x2200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000003740)={0xffffffffffffffff, 0x3, 0xa, 0x2, 0x98}) 6m24.846565979s ago: executing program 0 (id=1255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$msr(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 6m20.329187583s ago: executing program 0 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpid() r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x28}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000080), 0x4000000000000e6, 0x40040) fcntl$setstatus(r5, 0x4, 0x42000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003200080095f0ff00000000007269e997d89b400a89ee791574675691ec5722786b77e2fde2022d30a72db468b47aa2f894241b51315fbd0dc43d4ed33d4b0cb780be5726ae66672bc47217ba4279b8da0b7b7778ff487fa625ad2d07000000ee159cf2461557180f93623f428b04ad1c7a670d2733f4d49988aa166e9758a9f404e264eb6fe17801cb038c69debb4916498cec587932b57ef3e6cdddc9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r6, &(0x7f0000001b40)={0x2020}, 0x2020) 6m17.574623061s ago: executing program 0 (id=1261): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0xffffffff, 0x0, 'syz0\x00'}, 0x0, [0xdffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3, 0x0, 0x22, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1d, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd59, 0x0, 0x0, 0x3ff]}) mknod$loop(0x0, 0x100, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0x40000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x8000000c}) socket$nl_generic(0x10, 0x3, 0x10) 6m0.978981309s ago: executing program 41 (id=1261): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0xffffffff, 0x0, 'syz0\x00'}, 0x0, [0xdffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3, 0x0, 0x22, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1d, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd59, 0x0, 0x0, 0x3ff]}) mknod$loop(0x0, 0x100, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0x40000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x8000000c}) socket$nl_generic(0x10, 0x3, 0x10) 2m54.801334246s ago: executing program 2 (id=1421): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000f00)="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", 0x11f, 0x4c840, 0x0, 0x0) 2m48.851282866s ago: executing program 2 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000160001000000040000000000fe800000bc48000000000000000000aae000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000200"/176], 0xf8}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) 2m45.200955601s ago: executing program 2 (id=1427): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000540)={{0x0, 0x4, 0xbd23, 0x15, 0x6, 0x3, 0x80, 0x981a, 0x8, 0x6, 0x1ff, 0x7, 0xffffffffffffff5e, 0x80000000, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) lseek(r4, 0x9, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x7281, &(0x7f0000000280)={0x0, 0x4000, 0x400, 0x20007, 0x2d4}, 0x0, 0x0, 0x0) nanosleep(&(0x7f00000016c0)={0x0, 0x3938700}, 0x0) 2m37.889439954s ago: executing program 2 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) madvise(&(0x7f00003f8000/0x1000)=nil, 0x1000, 0x64) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0) 2m31.247419426s ago: executing program 2 (id=1439): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000400000000000000000000000850000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x0, 0x201) semop(r3, &(0x7f0000000140)=[{0x0, 0xfffb}], 0x1) semop(r3, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001"], 0x80}}, 0x0) 2m29.680011536s ago: executing program 2 (id=1440): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpid() r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x28}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r7, 0x4, 0x42000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003200080095f0ff00000000007269e997d89b400a89ee791574675691ec5722786b77e2fde2022d30a72db468b47aa2f894241b51315fbd0dc43d4ed33d4b0cb780be5726ae66672bc47217ba4279b8da0b7b7778ff487fa625ad2d07000000ee159cf2461557180f93623f428b04ad1c7a670d2733f4d49988aa166e9758a9f404e264eb6fe17801cb038c69debb4916498cec587932b57ef3e6cdddc9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r8, &(0x7f0000001b40)={0x2020}, 0x2020) 2m14.518747738s ago: executing program 42 (id=1440): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpid() r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x28}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r7, 0x4, 0x42000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003200080095f0ff00000000007269e997d89b400a89ee791574675691ec5722786b77e2fde2022d30a72db468b47aa2f894241b51315fbd0dc43d4ed33d4b0cb780be5726ae66672bc47217ba4279b8da0b7b7778ff487fa625ad2d07000000ee159cf2461557180f93623f428b04ad1c7a670d2733f4d49988aa166e9758a9f404e264eb6fe17801cb038c69debb4916498cec587932b57ef3e6cdddc9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r8, &(0x7f0000001b40)={0x2020}, 0x2020) 1m50.534948022s ago: executing program 9 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) write(r4, &(0x7f00000005c0)="45041a82eaec4743f524f6cac8c48e642c3ebc4835c965a7791818ed28e73711c45af9c4100c1fab4853ba17dbdcfa717fe4ca282f2665da7512c2d5b8d8d4f17c563e47e311f4f8528e64ebb28a9e3870a8b6f9f8d0cf5b56a33a395ab1b1de692a07bae50553d29e04c762032aa5ca514e8f4f1460558b7c15c086505e8239dca534dd2fd39f0c1b803ebe7fdfeb0215cfc55165b9bdac8e04496520d81217928884112bb8d7f5065d39631cb7f96d94b1c51b16279041a14130a8ee7f2b8cac7137b2b50aaf0848f9630171", 0xfd81) 1m46.82619639s ago: executing program 9 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000046000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x105, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) read$msr(r1, &(0x7f0000000580)=""/245, 0xf5) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) 1m38.741802897s ago: executing program 9 (id=1472): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x57e, &(0x7f0000000640)="$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") bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) 1m36.243431637s ago: executing program 9 (id=1474): dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1m33.815279764s ago: executing program 9 (id=1475): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) r1 = fanotify_init(0x40, 0x80000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/181, 0xb5}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, 0x0, 0x0) 1m30.356121014s ago: executing program 9 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000200025a729bd7000fdd3df250a0000cdff00400102000100080006000000000008001800aa5fffff08"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff", 0x24}], 0x1) r4 = syz_open_procfs(r1, &(0x7f0000000180)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) readv(r4, &(0x7f0000002e00)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) 1m14.962001574s ago: executing program 43 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000200025a729bd7000fdd3df250a0000cdff00400102000100080006000000000008001800aa5fffff08"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff", 0x24}], 0x1) r4 = syz_open_procfs(r1, &(0x7f0000000180)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) readv(r4, &(0x7f0000002e00)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) 17.645166329s ago: executing program 3 (id=1528): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup(r3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002d80)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) syz_open_procfs(0x0, 0x0) 14.48164622s ago: executing program 3 (id=1530): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1ff}, 0x8) syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x76) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="ee18de8d99062ae24eba4a2c5dd9b8c2095351505d6f90238349fee8f9a9e3c70908231b49aaf9f54d59d51718261c50be99180127d067adfdef15c27aef3f813523a8a3416dc032f2b1a43a7377b28f4286e68ddfab7ee9e87dd7cfdd0bda692e14fd10f439a1d9b1d7910770388ec19e160e40d3284e14fa2b1e76265ba98e2ea05a7e0effad2dbb7473ab4ddd2e301ca4f2f4a2844811c7e27f3f1deeef255387117292aa8a668af1f65cd3f0dea60c68eca3ce42b4eab5277f09b6", 0xbd) 10.66806381s ago: executing program 1 (id=1531): unshare(0x8040480) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r2}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0xf00) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) sendmmsg$unix(r7, &(0x7f0000000340), 0x400000000000085, 0x4000800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="3f000000010097", 0x7) landlock_restrict_self(r6, 0x0) openat(r4, &(0x7f0000000680)='./file0\x00', 0x40, 0x8) 8.708322543s ago: executing program 3 (id=1532): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, 0x0, 0x0, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) fanotify_init(0x1, 0x101000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000006000000010001000900000001000000", @ANYBLOB, @ANYRES8], 0x50) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) lseek(0xffffffffffffffff, 0x9, 0x0) 8.064362514s ago: executing program 1 (id=1533): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@lazytime}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8000, &(0x7f0000000240)={[{@errors_remount}, {@grpid}, {@lazytime}, {@noload}, {@block_validity}]}, 0x7d, 0x63c, &(0x7f0000001bc0)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafC29lcJubnteyC5Ldvewu0TLjEa2Ikux1rYsbebzgZHevBnpva9GT++NRqMJoLSms5s04lhEXEsiptqWTbatk00vPnh0PZuSaDR+8X4SSZHXWv9lcX84u0maj/nfxYivVbaWu/xw9eZcvdH0OOL0yq27p5cfrp5aujV3Y+HGwu3ZMz86e27mx7P/2Zs4Dxf3ly7//Nt/+t1vfrj4//qpJM7H1epv56Mjjr0y3Xx1IwuxPX8sIs5liS6vC+ynSvF+rEbEN2IqKvlc01Qs/XGolQMGqlFp9k+N8QZQOkkMuwbAcLTGAa19+0HsB4+y5xey2wdd4h8r9t4P5vtGh14kbXtGWW7EkT0ofy0iPnt0/G/ZFD2+hxjbg3J6lv8kIr7ZbfsnefxH8kiz+NNI2x6XpWeK7zay+v10F3VI2tL9vf8e76K0V32R+Nu3Qxb/+eI+y7/Y4/m3+4pnumO+bO0PgOFYv1B05NlAJDb7v2xk2Br/RDH+2dD4V35sqLPv2one/V+6B8++vXz8N9at/2/19wfzPjztGIclsfbRle5PWe3MeOcPl/7Sq/zptvFfNmXlt8aCfdj10PD5k4jjHfH/Pn/pk43tn3QZ/2arXOuzjJ+99d6lXst2Gf+uNZ5GnOi6/7P5fs9SHccnk2gdnzw7e3pxqb4w07ztWsa///vrf/Qqf9jxZ9v/0Cvxr36rueT12z/Lu9tnGf+88vRWM3Vgy7LJbeNP3x1Pruap8fx2s3mNJ5eLVZp3D+ZWVu6deX1dWuvk97PN+E9+r3v77xF/vvMx0frI7MPdX9580foc7bTL7f+y0eeKvWTxz/d4/2+3/f/cZxkf/+r+d7ouaL0kr8S/+Z3ExA5jAgAAAAAAgLJK82OwSVrbSKdprTjw9vU4lNbvLK98f/HO/dvzESfz30NW09aR7qnmfJLNzxa/h23Nn+mY/0FEHI2Iv1Ym8vna9Wp9ftjBAwAAAAAAAAAAAAAAAAAAwIg4XJz//7K4HtiHlTSt1YZdK2DfDPICc8Bo0/6hvPL2vz/XWwNGjP4fyqtr+/ehAKWgqUN5af9QXto/lJf2D+Wl/UN59W7/W5Y8GXRdAAAAAIA9c/S768/GImLtJxP5lBkvllWHWjNg0DrauCOBUCKVYVcAGJqNDt/p/1A6fe3jf1L8OeDgqwMMQdItMx8cNF7f+Ne7PhIAAAAAAAAAAAAAGIATx9afJc7/h1Jy2h+U187O/6/s/KHAyOj2hz/+BAjKwT4+lFwfXwIc7LXA+f8AAAAAAAAAAAAAsG8m8ylJa8XPgCcjTWu1iK9ExJGoJotL9YWZiPhqRLxdqR7I5meHXWkAAAAAAAAAAAAAAAAAAAB4wyw/XL05V68v3GtPfLol581OtK54Oir1aU9EMvAi0ujImYiIUYh9MImxtpwkYi3b8nvxzMnu3z8xCq9PkRjyBxMAAAAAAAAAAAAAAAAAAJRQ27nH3R3/+z7XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD23+b1/weXGHaMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCX0+cBAAD///ULOhA=") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 7.298181938s ago: executing program 1 (id=1534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 6.829358893s ago: executing program 1 (id=1535): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) 5.530267745s ago: executing program 1 (id=1536): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup(r3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002d80)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) syz_open_procfs(0x0, 0x0) 4.331172472s ago: executing program 3 (id=1537): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 3.967118634s ago: executing program 3 (id=1538): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1ff}, 0x8) syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x76) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="ee18de8d99062ae24eba4a2c5dd9b8c2095351505d6f90238349fee8f9a9e3c70908231b49aaf9f54d59d51718261c50be99180127d067adfdef15c27aef3f813523a8a3416dc032f2b1a43a7377b28f4286e68ddfab7ee9e87dd7cfdd0bda692e14fd10f439a1d9b1d7910770388ec19e160e40d3284e14fa2b1e76265ba98e2ea05a7e0effad2dbb7473ab4ddd2e301ca4f2f4a2844811c7e27f3f1deeef255387117292aa8a668af1f65cd3f0dea60c68eca3ce42b4eab5277f09b6", 0xbd) 2.249491269s ago: executing program 3 (id=1539): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f0000000200)=ANY=[], 0x12, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x80, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20f3, 0x105) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) clock_gettime(0x2cbfc30e0ebf623a, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 0s ago: executing program 1 (id=1540): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@jqfmt_vfsv1}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): 418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.639540][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.689128][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.709354][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.734616][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.767243][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.811149][ T7418] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.839493][ T7418] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.848275][ T7418] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.884967][ T7418] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.054207][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 555.291087][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.298972][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.429447][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.437360][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.405605][ T7001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.873918][ T7676] loop7: detected capacity change from 0 to 128 [ 563.700650][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.707023][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.742124][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 566.701183][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.5.349'. [ 569.809259][ T7729] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 570.692850][ T7734] loop7: detected capacity change from 0 to 128 [ 576.841792][ T7766] netlink: 36 bytes leftover after parsing attributes in process `syz.8.362'. [ 584.658689][ T7800] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 591.100596][ T5784] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 591.108539][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 595.344140][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.8.372'. [ 596.940027][ T5784] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 596.946537][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 599.636748][ T7893] loop7: detected capacity change from 0 to 128 [ 599.714802][ T7893] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 599.809899][ T7893] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 601.751596][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 601.862010][ T7042] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 604.069574][ T7915] loop8: detected capacity change from 0 to 256 [ 604.447572][ T7915] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 605.549951][ T28] audit: type=1800 audit(1779533533.396:6): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.382" name="file1" dev="loop8" ino=1048638 res=0 errno=0 [ 608.951087][ T7933] loop4: detected capacity change from 0 to 1024 [ 608.958158][ T7933] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.487444][ T7933] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 609.487444][ T7933] [ 609.682707][ T7848] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 614.060077][ T5782] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 614.066517][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 624.771715][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.778098][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.038806][ T8048] loop7: detected capacity change from 0 to 8 [ 629.099801][ T8048] squashfs image failed sanity check [ 629.163408][ T8035] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.012952][ T8058] loop4: detected capacity change from 0 to 128 [ 634.651751][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.196245][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 641.349450][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 646.167264][ T5782] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 646.219417][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 651.626026][ T8156] loop4: detected capacity change from 0 to 128 [ 654.073067][ T8148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.586946][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.432'. [ 665.416772][ T8230] loop7: detected capacity change from 0 to 8 [ 665.475379][ T8230] squashfs image failed sanity check [ 666.393956][ T8225] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 668.702758][ T8241] loop4: detected capacity change from 0 to 512 [ 668.787212][ T8241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.806601][ T8241] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.037441][ T7001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.701103][ T5782] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 672.707555][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 675.149078][ T8294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.441'. [ 677.695501][ T8307] loop7: detected capacity change from 0 to 8 [ 677.800463][ T8307] squashfs image failed sanity check [ 677.893502][ T8225] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 680.986042][ T8324] loop4: detected capacity change from 0 to 1024 [ 681.742113][ T8327] loop8: detected capacity change from 0 to 2048 [ 681.978292][ T8327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 682.852654][ T8339] loop7: detected capacity change from 0 to 256 [ 683.743297][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.4.454'. [ 686.195762][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.204661][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.865187][ T8363] loop8: detected capacity change from 0 to 8 [ 686.899857][ T8363] squashfs image failed sanity check [ 693.099638][ T8399] netlink: 44 bytes leftover after parsing attributes in process `syz.8.459'. [ 696.597968][ T8413] loop4: detected capacity change from 0 to 1024 [ 696.761062][ T8416] loop7: detected capacity change from 0 to 2048 [ 696.884964][ T8416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.352047][ T8424] loop4: detected capacity change from 0 to 256 [ 699.449841][ T8421] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 699.758149][ T8426] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 699.770423][ T8426] EXT4-fs (loop7): This should not happen!! Data will be lost [ 699.770423][ T8426] [ 699.780157][ T8426] EXT4-fs (loop7): Total free blocks count 0 [ 699.786141][ T8426] EXT4-fs (loop7): Free/Dirty block details [ 699.792884][ T8426] EXT4-fs (loop7): free_blocks=2415919104 [ 699.798615][ T8426] EXT4-fs (loop7): dirty_blocks=38800 [ 699.804077][ T8426] EXT4-fs (loop7): Block reservation details [ 699.810101][ T8426] EXT4-fs (loop7): i_reserved_data_blocks=2421 [ 699.866660][ T8424] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 699.998181][ T6951] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 700.027694][ T28] audit: type=1800 audit(1779533628.846:7): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.466" name="file1" dev="loop4" ino=1048645 res=0 errno=0 [ 701.803609][ T8446] netlink: 36 bytes leftover after parsing attributes in process `syz.8.463'. [ 708.122019][ T8473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.472'. [ 714.072567][ T8509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.474'. [ 717.966452][ T7042] EXT4-fs: 31 callbacks suppressed [ 717.966468][ T7042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.433470][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 719.469605][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 719.477885][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 719.486358][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 719.512817][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 719.526800][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 720.441329][ T8554] input: syz1 as /devices/virtual/input/input12 [ 720.875331][ T8533] chnl_net:caif_netlink_parms(): no params data found [ 721.032667][ T8563] fuse: Bad value for 'fd' [ 721.089579][ T8562] loop4: detected capacity change from 0 to 2048 [ 722.186104][ T5784] Bluetooth: hci4: command tx timeout [ 722.340509][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.534944][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.552710][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.585089][ T8533] bridge_slave_0: entered allmulticast mode [ 723.081048][ T8533] bridge_slave_0: entered promiscuous mode [ 723.598337][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.691199][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.698510][ T8533] bridge_slave_1: entered allmulticast mode [ 723.717899][ T8533] bridge_slave_1: entered promiscuous mode [ 724.001846][ T8573] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 724.034249][ T8533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.086438][ T8533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.219461][ T5782] Bluetooth: hci4: command tx timeout [ 724.343659][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.5.487'. [ 724.365459][ T8533] team0: Port device team_slave_0 added [ 724.428340][ T8533] team0: Port device team_slave_1 added [ 724.612349][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.668089][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.719745][ T8533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.880575][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.887606][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.959551][ T8533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.886002][ T8533] hsr_slave_0: entered promiscuous mode [ 725.928042][ T8533] hsr_slave_1: entered promiscuous mode [ 726.016606][ T8533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.032052][ T8533] Cannot create hsr debugfs directory [ 726.085008][ T8580] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 726.151534][ T8580] EXT4-fs (loop4): This should not happen!! Data will be lost [ 726.151534][ T8580] [ 726.173661][ T8580] EXT4-fs (loop4): Total free blocks count 0 [ 726.197846][ T8580] EXT4-fs (loop4): Free/Dirty block details [ 726.232500][ T8580] EXT4-fs (loop4): free_blocks=2415919104 [ 726.238281][ T8580] EXT4-fs (loop4): dirty_blocks=880 [ 726.252047][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.276089][ T8580] EXT4-fs (loop4): Block reservation details [ 726.292920][ T8580] EXT4-fs (loop4): i_reserved_data_blocks=55 [ 726.310236][ T5782] Bluetooth: hci4: command tx timeout [ 726.403439][ T8580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.744955][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.242276][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.601905][ T8601] loop8: detected capacity change from 0 to 128 [ 727.752485][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.810948][ T8601] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 727.872730][ T8601] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 728.104506][ T8533] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 728.173212][ T8533] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 728.291632][ T8533] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 728.332732][ T8533] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 728.379471][ T5782] Bluetooth: hci4: command tx timeout [ 728.411873][ T7418] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 728.791733][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 728.802459][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 728.810959][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 728.899612][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 728.919692][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 728.963141][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.718676][ T8533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.270476][ T5784] Bluetooth: hci2: command tx timeout [ 731.731989][ T8533] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.997916][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.005247][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.139993][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.147208][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.710828][ T5784] Bluetooth: hci2: command tx timeout [ 733.804689][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.8.496'. [ 734.647694][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 736.321856][ T5784] Bluetooth: hci2: command tx timeout [ 737.030028][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.037249][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.051370][ T8606] bridge_slave_0: entered allmulticast mode [ 737.065909][ T8606] bridge_slave_0: entered promiscuous mode [ 737.076859][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.105865][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.123833][ T8606] bridge_slave_1: entered allmulticast mode [ 737.138800][ T8606] bridge_slave_1: entered promiscuous mode [ 737.382729][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.434355][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.527736][ T11] hsr_slave_0: left promiscuous mode [ 737.550483][ T11] hsr_slave_1: left promiscuous mode [ 737.569726][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.578101][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.636423][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.649684][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.676947][ T11] bridge_slave_1: left allmulticast mode [ 737.688527][ T11] bridge_slave_1: left promiscuous mode [ 737.694935][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.760270][ T11] bridge_slave_0: left allmulticast mode [ 737.766008][ T11] bridge_slave_0: left promiscuous mode [ 737.779956][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.814004][ T11] veth1_macvtap: left promiscuous mode [ 737.839650][ T11] veth0_macvtap: left promiscuous mode [ 737.845390][ T11] veth1_vlan: left promiscuous mode [ 737.851203][ T11] veth0_vlan: left promiscuous mode [ 738.379713][ T5784] Bluetooth: hci2: command tx timeout [ 745.431697][ T11] team0 (unregistering): Port device team_slave_1 removed [ 745.536534][ T11] team0 (unregistering): Port device team_slave_0 removed [ 745.661903][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.862148][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.347227][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.354023][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.549781][ T8680] input: syz1 as /devices/virtual/input/input13 [ 748.701060][ T11] team0 (unregistering): Port device dummy0 removed [ 748.980573][ T11] bond0 (unregistering): Released all slaves [ 749.198289][ T8606] team0: Port device team_slave_0 added [ 749.312147][ T8606] team0: Port device team_slave_1 added [ 749.474396][ T8533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.868829][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.903907][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.991247][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.012009][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.019112][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.049929][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.297532][ T8606] hsr_slave_0: entered promiscuous mode [ 750.329737][ T8606] hsr_slave_1: entered promiscuous mode [ 750.339608][ T8606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.347242][ T8606] Cannot create hsr debugfs directory [ 750.918071][ T8533] veth0_vlan: entered promiscuous mode [ 751.784462][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.355839][ T8533] veth1_vlan: entered promiscuous mode [ 754.565420][ T8714] input: syz1 as /devices/virtual/input/input14 [ 755.881270][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.077162][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.155747][ T8533] veth0_macvtap: entered promiscuous mode [ 757.436200][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.544533][ T8533] veth1_macvtap: entered promiscuous mode [ 757.625831][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.688220][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.729366][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.759430][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.789331][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.819682][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.862133][ T8533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.942122][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.983635][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.009359][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.032576][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.043091][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.199530][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.240794][ T8533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.166954][ T8533] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.185260][ T8533] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.202932][ T8533] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.217984][ T8533] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.446314][ T8606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 759.672156][ T8606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 759.977476][ T8606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 761.374278][ T8744] loop8: detected capacity change from 0 to 512 [ 761.381864][ T8744] EXT4-fs: Ignoring removed i_version option [ 762.895122][ T8606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 762.982950][ T8744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.995869][ T8744] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.231066][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.238972][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.316334][ T7418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.196863][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.210418][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.694529][ T8756] loop9: detected capacity change from 0 to 256 [ 765.767950][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.017625][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.234187][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.241504][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.356606][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.363812][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.592245][ T8606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.652330][ T11] hsr_slave_0: left promiscuous mode [ 767.713203][ T11] hsr_slave_1: left promiscuous mode [ 767.749931][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.765481][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.810417][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.839571][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.925587][ T11] bridge_slave_1: left allmulticast mode [ 767.939339][ T11] bridge_slave_1: left promiscuous mode [ 767.951890][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.135646][ T11] bridge_slave_0: left allmulticast mode [ 768.150417][ T11] bridge_slave_0: left promiscuous mode [ 768.169532][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.304492][ T11] veth1_macvtap: left promiscuous mode [ 769.633515][ T11] veth0_macvtap: left promiscuous mode [ 769.670897][ T11] veth1_vlan: left promiscuous mode [ 769.676318][ T11] veth0_vlan: left promiscuous mode [ 769.935206][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.525'. [ 770.002808][ T8773] loop9: detected capacity change from 0 to 8 [ 770.069902][ T8773] squashfs image failed sanity check [ 775.196491][ T8789] loop9: detected capacity change from 0 to 128 [ 778.995325][ T11] team0 (unregistering): Port device team_slave_1 removed [ 780.749841][ T11] team0 (unregistering): Port device team_slave_0 removed [ 782.093198][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.383175][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.340589][ T8822] loop8: detected capacity change from 0 to 1024 [ 784.358636][ T8822] EXT4-fs: Ignoring removed bh option [ 784.389094][ T8822] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 784.491357][ T8822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.205794][ T11] team0 (unregistering): Port device dummy0 removed [ 787.053161][ T11] bond0 (unregistering): Released all slaves [ 787.295979][ T8827] netlink: 44 bytes leftover after parsing attributes in process `syz.9.541'. [ 787.867981][ T7418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.899895][ T5784] Bluetooth: hci0: unexpected event for opcode 0x007f [ 791.342330][ T8865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 791.352106][ T8865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 791.371585][ T8865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 791.388210][ T8865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 791.405947][ T8865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 791.417764][ T8865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.806837][ T8865] Bluetooth: hci3: command tx timeout [ 795.585973][ T8863] chnl_net:caif_netlink_parms(): no params data found [ 795.819654][ T8865] Bluetooth: hci3: command tx timeout [ 797.909498][ T8865] Bluetooth: hci3: command tx timeout [ 800.564312][ T8906] netlink: 44 bytes leftover after parsing attributes in process `syz.8.554'. [ 800.574404][ T8865] Bluetooth: hci3: command tx timeout [ 800.729056][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.763031][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.797306][ T8863] bridge_slave_0: entered allmulticast mode [ 800.819042][ T8863] bridge_slave_0: entered promiscuous mode [ 800.896353][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.959082][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.012628][ T8863] bridge_slave_1: entered allmulticast mode [ 801.031094][ T8863] bridge_slave_1: entered promiscuous mode [ 801.152474][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.196975][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.339739][ T8863] team0: Port device team_slave_0 added [ 801.388135][ T8863] team0: Port device team_slave_1 added [ 801.450157][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.459319][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.767986][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.000386][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.040302][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.174783][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.518395][ T8863] hsr_slave_0: entered promiscuous mode [ 802.559654][ T8863] hsr_slave_1: entered promiscuous mode [ 802.589472][ T8863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.598039][ T8863] Cannot create hsr debugfs directory [ 804.445738][ T8865] Bluetooth: hci1: unexpected event for opcode 0x007f [ 810.119673][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.127534][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.224804][ T8863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 810.499589][ T8863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 810.588780][ T8863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 810.945680][ T8863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 812.731777][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.800374][ T9014] loop8: detected capacity change from 0 to 128 [ 813.992352][ T8863] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.120180][ T11] hsr_slave_0: left promiscuous mode [ 814.159709][ T11] hsr_slave_1: left promiscuous mode [ 814.195027][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.230109][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.261389][ T11] bridge_slave_1: left allmulticast mode [ 814.267113][ T11] bridge_slave_1: left promiscuous mode [ 814.330937][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.427241][ T8865] Bluetooth: hci1: unexpected event for opcode 0x007f [ 814.550182][ T11] bridge_slave_0: left allmulticast mode [ 814.564902][ T11] bridge_slave_0: left promiscuous mode [ 814.578431][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.043485][ T11] team0 (unregistering): Port device team_slave_1 removed [ 817.298476][ T11] team0 (unregistering): Port device team_slave_0 removed [ 817.574966][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.519864][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.143331][ T11] bond0 (unregistering): Released all slaves [ 824.965562][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.972759][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.031258][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.038441][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.119814][ T9039] netlink: 44 bytes leftover after parsing attributes in process `syz.8.573'. [ 825.324571][ T8863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 826.574078][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.801322][ T8863] veth0_vlan: entered promiscuous mode [ 826.883746][ T8863] veth1_vlan: entered promiscuous mode [ 828.206114][ T8863] veth0_macvtap: entered promiscuous mode [ 828.274760][ T8863] veth1_macvtap: entered promiscuous mode [ 828.385084][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.468575][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.519358][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.549407][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.599267][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.699271][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.752915][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.844693][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.959296][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.039314][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.068373][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.100070][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.179379][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.223225][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.258996][ T8863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.334278][ T8863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.373809][ T8863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.419680][ T8863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.884424][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.929498][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.019747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.027643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.768856][ T8865] Bluetooth: hci1: unexpected event for opcode 0x007f [ 832.169684][ T9125] netlink: 44 bytes leftover after parsing attributes in process `syz.8.586'. [ 844.289683][ T9186] netlink: 44 bytes leftover after parsing attributes in process `syz.8.595'. [ 848.299603][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 850.311362][ T9220] autofs4:pid:9220:autofs_fill_super: called with bogus options [ 854.186851][ T9252] loop8: detected capacity change from 0 to 1024 [ 855.699556][ T9261] netlink: 44 bytes leftover after parsing attributes in process `syz.9.606'. [ 870.460231][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.469647][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.702817][ T9418] netlink: 44 bytes leftover after parsing attributes in process `syz.9.624'. [ 883.866325][ T9456] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 884.082635][ T9449] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 892.454212][ T8865] Bluetooth: hci0: unexpected event for opcode 0x007f [ 901.130869][ T8865] Bluetooth: hci1: unexpected event for opcode 0x007f [ 901.786488][ T9557] loop0: detected capacity change from 0 to 128 [ 911.354435][ T9621] loop0: detected capacity change from 0 to 128 [ 918.862438][ T9643] Bluetooth: hci3: command 0x0406 tx timeout [ 922.979420][ T9700] loop9: detected capacity change from 0 to 128 [ 927.759073][ T8865] Bluetooth: hci0: unexpected event for opcode 0x007f [ 932.173094][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.179519][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.033890][ T9768] loop8: detected capacity change from 0 to 128 [ 937.796255][ T8865] Bluetooth: hci1: unexpected event for opcode 0x007f [ 946.716499][ T9847] loop8: detected capacity change from 0 to 128 [ 950.496405][ T8865] Bluetooth: hci1: unexpected event for opcode 0x007f [ 961.487143][ T9945] loop8: detected capacity change from 0 to 128 [ 964.645748][ T8865] Bluetooth: hci3: unexpected event for opcode 0x007f [ 964.673930][ T9977] loop9: detected capacity change from 0 to 128 [ 964.965815][ T9977] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 965.089346][ T9977] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 965.952197][ T8533] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.249685][T10014] loop0: detected capacity change from 0 to 128 [ 974.132686][T10046] loop8: detected capacity change from 0 to 128 [ 982.428299][ T8865] Bluetooth: hci4: unexpected event for opcode 0x007f [ 984.812621][T10127] loop0: detected capacity change from 0 to 128 [ 985.556569][T10136] trusted_key: encrypted_key: insufficient parameters specified [ 993.113542][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.129490][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.621577][T10180] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 995.933596][T10199] loop8: detected capacity change from 0 to 8 [ 995.987657][T10199] squashfs image failed sanity check [ 1000.109599][T10220] netlink: 36 bytes leftover after parsing attributes in process `syz.8.752'. [ 1004.276379][T10247] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1009.182898][T10274] netlink: 36 bytes leftover after parsing attributes in process `syz.9.761'. [ 1013.108581][T10298] netlink: 44 bytes leftover after parsing attributes in process `syz.8.762'. [ 1013.715777][T10300] fuse: Bad value for 'fd' [ 1020.360455][T10335] netlink: 36 bytes leftover after parsing attributes in process `syz.5.771'. [ 1023.225336][T10349] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1024.042745][T10355] loop8: detected capacity change from 0 to 8 [ 1024.089056][T10355] squashfs image failed sanity check [ 1026.986244][T10373] netlink: 44 bytes leftover after parsing attributes in process `syz.9.774'. [ 1027.650800][T10376] fuse: Bad value for 'fd' [ 1039.012826][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.781'. [ 1046.018823][ T9791] IPVS: starting estimator thread 0... [ 1046.119511][T10474] IPVS: using max 17 ests per chain, 40800 per kthread [ 1046.313581][ T8865] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1050.322109][T10505] netlink: 36 bytes leftover after parsing attributes in process `syz.9.798'. [ 1053.434046][T10517] loop8: detected capacity change from 0 to 128 [ 1053.581607][T10517] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1053.607384][T10517] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.020873][ T7418] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1054.951701][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.958082][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.131406][ T8865] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1073.090586][ T8865] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1076.315670][T10662] netlink: 44 bytes leftover after parsing attributes in process `syz.5.824'. [ 1077.406094][T10662] fuse: Bad value for 'fd' [ 1096.892498][T10779] sctp: [Deprecated]: syz.9.834 (pid 10779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1096.892498][T10779] Use struct sctp_sack_info instead [ 1100.137271][T10789] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1116.595542][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.602982][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.331493][T10909] netlink: 44 bytes leftover after parsing attributes in process `syz.5.865'. [ 1124.407277][T10909] fuse: Bad value for 'fd' [ 1125.763141][T10928] loop0: detected capacity change from 0 to 8 [ 1125.889616][T10928] squashfs image failed sanity check [ 1132.954891][T10974] netlink: 44 bytes leftover after parsing attributes in process `syz.5.874'. [ 1134.080343][T10974] fuse: Bad value for 'fd' [ 1136.923095][T10993] loop0: detected capacity change from 0 to 128 [ 1138.042558][T11000] loop8: detected capacity change from 0 to 128 [ 1138.322098][T11000] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1138.411277][T11000] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.490785][T11006] loop0: detected capacity change from 0 to 8 [ 1138.569911][T11006] squashfs image failed sanity check [ 1138.700829][ T7418] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1149.755413][T11079] loop8: detected capacity change from 0 to 128 [ 1152.209532][T11092] bpf: Bad value for 'mode' [ 1160.233806][T11151] bpf: Bad value for 'mode' [ 1167.950866][T11212] loop0: detected capacity change from 0 to 8 [ 1168.036131][T11212] squashfs image failed sanity check [ 1169.202023][ T9247] IPVS: starting estimator thread 0... [ 1169.319288][T11230] IPVS: using max 27 ests per chain, 64800 per kthread [ 1177.449767][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.456169][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1200.049295][ T5809] IPVS: starting estimator thread 0... [ 1201.239439][T11423] IPVS: using max 20 ests per chain, 48000 per kthread [ 1201.392843][T11427] loop0: detected capacity change from 0 to 128 [ 1202.714873][T11437] loop9: detected capacity change from 0 to 128 [ 1210.932915][T11493] loop0: detected capacity change from 0 to 128 [ 1219.083016][T11537] loop9: detected capacity change from 0 to 128 [ 1220.536490][T11551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1220.548644][T11551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1220.733816][T11551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1220.746901][T11551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1220.759821][T11551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1220.768255][T11551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1223.475831][T11551] Bluetooth: hci2: command tx timeout [ 1223.723062][T11547] chnl_net:caif_netlink_parms(): no params data found [ 1223.982045][ T9301] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.336851][ T9301] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.499165][T11551] Bluetooth: hci2: command tx timeout [ 1225.782777][ T9301] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.013908][T11547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.049482][T11547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.073498][T11547] bridge_slave_0: entered allmulticast mode [ 1226.142556][T11547] bridge_slave_0: entered promiscuous mode [ 1226.237466][ T9301] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.312454][T11547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.354069][T11547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.399296][T11547] bridge_slave_1: entered allmulticast mode [ 1226.430196][T11547] bridge_slave_1: entered promiscuous mode [ 1226.546927][T11547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.614224][T11547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.095477][T11547] team0: Port device team_slave_0 added [ 1227.213924][T11547] team0: Port device team_slave_1 added [ 1227.508589][T11547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.544503][T11547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.582511][T11551] Bluetooth: hci2: command tx timeout [ 1227.625146][T11547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.668629][T11547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.687043][T11547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.758868][T11547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.216600][T11547] hsr_slave_0: entered promiscuous mode [ 1229.837734][T11551] Bluetooth: hci2: command tx timeout [ 1229.886602][T11547] hsr_slave_1: entered promiscuous mode [ 1229.893617][T11547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.905536][T11547] Cannot create hsr debugfs directory [ 1230.612554][T11615] loop8: detected capacity change from 0 to 128 [ 1231.667635][T11624] loop0: detected capacity change from 0 to 128 [ 1231.760917][T11624] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1231.825187][T11624] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.770829][ T8863] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1237.088684][T11652] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1238.874981][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.881466][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.673791][ T9301] hsr_slave_0: left promiscuous mode [ 1241.752673][T11681] trusted_key: encrypted_key: key user:syz not found [ 1242.006508][ T9301] hsr_slave_1: left promiscuous mode [ 1242.489401][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.496988][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.530459][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.537953][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.596562][ T9301] bridge_slave_1: left allmulticast mode [ 1242.616418][ T9301] bridge_slave_1: left promiscuous mode [ 1242.633187][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.671206][ T9301] bridge_slave_0: left allmulticast mode [ 1242.676930][ T9301] bridge_slave_0: left promiscuous mode [ 1242.710804][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.997650][ T9301] veth1_macvtap: left promiscuous mode [ 1243.003726][ T9301] veth0_macvtap: left promiscuous mode [ 1243.029926][ T9301] veth1_vlan: left promiscuous mode [ 1243.047336][ T9301] veth0_vlan: left promiscuous mode [ 1244.763186][T11693] loop0: detected capacity change from 0 to 128 [ 1244.903461][T11693] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1244.953368][T11693] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.698139][ T8863] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1251.455586][ T9301] team0 (unregistering): Port device team_slave_1 removed [ 1253.930217][ T9301] team0 (unregistering): Port device team_slave_0 removed [ 1254.199458][ T9301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.608867][ T9301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.197493][T11732] loop8: detected capacity change from 0 to 128 [ 1258.278673][T11732] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1260.048556][T11732] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1260.289616][T11741] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1260.811430][ T9301] team0 (unregistering): Port device dummy0 removed [ 1261.366672][ T9301] bond0 (unregistering): Released all slaves [ 1262.999223][T11547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1263.158309][T11547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1263.259791][T11547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1263.316567][T11547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1263.793643][T11547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.925377][T11547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.012977][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.021203][ T9305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.051676][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.058885][ T9305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.136655][ T7418] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1267.996238][ T9301] IPVS: stop unused estimator thread 0... [ 1268.423723][T11547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.697618][T11547] veth0_vlan: entered promiscuous mode [ 1268.763254][T11547] veth1_vlan: entered promiscuous mode [ 1268.897153][T11547] veth0_macvtap: entered promiscuous mode [ 1270.541999][T11547] veth1_macvtap: entered promiscuous mode [ 1270.634376][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.668778][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.689636][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.731783][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.759230][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.789190][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.811139][T11547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.846939][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.893866][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.914415][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.948828][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.989085][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.016916][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.041026][T11547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.131286][T11547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.179677][T11547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.188549][T11547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.238353][T11547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.832263][ T9316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.850608][ T9316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.971229][ T9315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.014147][ T9315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.363047][T11801] 9pnet_fd: p9_fd_create_tcp (11801): problem connecting socket to 127.0.0.1 [ 1278.026896][T11830] loop9: detected capacity change from 0 to 128 [ 1278.161485][T11830] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1278.270568][T11830] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.550810][ T8533] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1281.788053][T11850] loop9: detected capacity change from 0 to 2048 [ 1281.890307][T11850] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 1281.938854][T11850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1289.363212][T11892] loop9: detected capacity change from 0 to 128 [ 1289.461517][T11892] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1289.563655][T11892] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.077793][T11949] loop8: detected capacity change from 0 to 512 [ 1296.167056][T11949] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1296.228895][T11949] EXT4-fs (loop8): invalid journal inode [ 1296.289530][T11949] EXT4-fs (loop8): can't get journal size [ 1296.318878][ T8533] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1296.450480][T11949] EXT4-fs (loop8): 1 truncate cleaned up [ 1296.552658][T11949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.612388][T11955] loop0: detected capacity change from 0 to 2048 [ 1299.545384][T11955] EXT4-fs: error -4 creating inode table initialization thread [ 1299.562538][T11955] EXT4-fs (loop0): mount failed [ 1299.791956][ T7418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.094949][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.109206][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.235959][T11990] loop1: detected capacity change from 0 to 8 [ 1302.292748][T11990] squashfs image failed sanity check [ 1306.883223][T12006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.035934][T12027] loop9: detected capacity change from 0 to 1024 [ 1311.361070][T12037] loop1: detected capacity change from 0 to 2048 [ 1311.492641][T12037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1314.936935][T12044] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1315.000911][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.573302][T12083] loop8: detected capacity change from 0 to 8 [ 1319.815453][T12083] squashfs image failed sanity check [ 1324.865330][T12121] loop1: detected capacity change from 0 to 128 [ 1327.956887][T12139] loop0: detected capacity change from 0 to 2048 [ 1328.087326][T12142] sctp: [Deprecated]: syz.9.1061 (pid 12142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1328.087326][T12142] Use struct sctp_sack_info instead [ 1328.110460][T12139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.657143][ T8863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.031067][T12202] loop0: detected capacity change from 0 to 8 [ 1337.082786][T12202] squashfs image failed sanity check [ 1338.853901][T12211] loop8: detected capacity change from 0 to 128 [ 1338.958173][T12211] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1340.547752][T12211] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.820127][T11551] Bluetooth: hci2: command 0x0406 tx timeout [ 1348.201904][ T7418] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1348.977498][T12271] loop1: detected capacity change from 0 to 128 [ 1349.983105][T12279] loop8: detected capacity change from 0 to 8 [ 1350.013963][T12279] squashfs image failed sanity check [ 1355.309604][T12309] loop8: detected capacity change from 0 to 2048 [ 1355.440766][T12309] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.466562][T12309] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1357.162034][ T7418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.433699][T12321] loop1: detected capacity change from 0 to 128 [ 1357.506430][T12321] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1357.522647][T12321] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.812541][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.823577][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.935908][T12387] loop8: detected capacity change from 0 to 8 [ 1366.959850][T12387] squashfs image failed sanity check [ 1368.247222][T11547] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1370.628389][T12406] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1098'. [ 1372.460678][T12414] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1376.229351][T12436] sit1: entered allmulticast mode [ 1378.200995][T12446] loop9: detected capacity change from 0 to 8 [ 1378.265432][T12446] squashfs image failed sanity check [ 1380.949273][T12464] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1109'. [ 1385.734000][T12479] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1385.802610][T12481] loop8: detected capacity change from 0 to 128 [ 1385.882074][T12481] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1386.023519][T12481] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.678858][T12491] loop1: detected capacity change from 0 to 128 [ 1394.250511][T12503] loop1: detected capacity change from 0 to 8 [ 1394.269486][T12503] squashfs image failed sanity check [ 1395.199088][T11733] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1397.690001][T11551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1397.709142][T11551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1397.720197][T11551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1397.746491][T11551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1397.755843][T11551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1397.763607][T11551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1398.214435][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.281310][T12484] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1398.475117][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.652350][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.829589][ T8865] Bluetooth: hci0: command tx timeout [ 1399.894810][T12541] loop0: detected capacity change from 0 to 512 [ 1399.904441][T12543] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1399.945967][T12545] loop1: detected capacity change from 0 to 128 [ 1399.987558][T12541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.026737][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.060880][T12541] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.696883][T12541] loop0: detected capacity change from 512 to 1 [ 1400.743584][T12517] chnl_net:caif_netlink_parms(): no params data found [ 1400.898236][ T28] audit: type=1800 audit(1779534329.706:8): pid=12541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1123" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1401.039060][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1401.108794][ T8863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.142620][ T8863] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1401.246755][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.276589][ T8863] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 1401.296379][ T787] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1401.305839][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.306129][ T8863] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1401.313992][ T787] usb 2-1: Product: syz [ 1401.314035][ T787] usb 2-1: Manufacturer: syz [ 1401.314051][ T787] usb 2-1: SerialNumber: syz [ 1401.326566][ T787] usb 2-1: config 0 descriptor?? [ 1401.357248][ T787] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1401.369173][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 1401.377087][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1401.398825][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1401.412287][ T8863] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1401.424706][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1401.452883][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1401.474671][T12547] kmmpd-loop0: attempt to access beyond end of device [ 1401.474671][T12547] loop0: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 1401.490717][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1401.500962][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1401.512089][ T787] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1401.529251][T12547] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 1401.588457][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1401.615976][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1401.663412][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1401.689255][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1401.697073][ T787] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1401.766470][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.774656][ T787] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1401.781450][T12517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.807324][T12517] bridge_slave_0: entered allmulticast mode [ 1401.816350][T12517] bridge_slave_0: entered promiscuous mode [ 1401.852870][ T787] usb 2-1: USB disconnect, device number 4 [ 1401.899617][ T8865] Bluetooth: hci0: command tx timeout [ 1403.511594][ T787] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1403.615191][ T787] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1403.621878][T12517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.651877][T12517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.680266][ T787] keyspan 2-1:0.0: device disconnected [ 1403.688329][T12517] bridge_slave_1: entered allmulticast mode [ 1403.733202][T12517] bridge_slave_1: entered promiscuous mode [ 1403.979205][ T8865] Bluetooth: hci0: command tx timeout [ 1405.470570][T12517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.530375][T12517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.129501][ T8865] Bluetooth: hci0: command tx timeout [ 1406.712050][T12517] team0: Port device team_slave_0 added [ 1406.863002][T12517] team0: Port device team_slave_1 added [ 1407.012078][T12596] loop9: detected capacity change from 0 to 128 [ 1407.543649][T12601] loop0: detected capacity change from 0 to 8 [ 1407.611897][T12601] squashfs image failed sanity check [ 1407.662706][T12517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.669778][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.696747][T12517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.718020][T12517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.726408][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.559457][T12517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.058080][T12517] hsr_slave_0: entered promiscuous mode [ 1410.109782][T12517] hsr_slave_1: entered promiscuous mode [ 1410.129384][T12517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1410.166848][T12517] Cannot create hsr debugfs directory [ 1411.862441][ T11] hsr_slave_0: left promiscuous mode [ 1411.929257][ T11] hsr_slave_1: left promiscuous mode [ 1411.949287][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.956800][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.992193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.019068][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.035639][ T11] bridge_slave_1: left allmulticast mode [ 1412.051191][ T11] bridge_slave_1: left promiscuous mode [ 1412.057067][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.149922][ T11] bridge_slave_0: left allmulticast mode [ 1412.155680][ T11] bridge_slave_0: left promiscuous mode [ 1412.199331][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.369620][ T11] veth1_macvtap: left promiscuous mode [ 1412.375266][ T11] veth0_macvtap: left promiscuous mode [ 1412.389990][ T11] veth1_vlan: left promiscuous mode [ 1412.395396][ T11] veth0_vlan: left promiscuous mode [ 1416.319514][T12645] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1420.578454][T12668] loop0: detected capacity change from 0 to 8 [ 1420.604153][T12668] squashfs image failed sanity check [ 1423.190996][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.197382][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.440541][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1423.740192][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1423.895903][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.523666][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.468878][T12701] loop1: detected capacity change from 0 to 8 [ 1431.228675][T11733] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1431.897608][ T11] bond0 (unregistering): Released all slaves [ 1431.987504][T12716] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1435.558469][ T11] IPVS: stop unused estimator thread 0... [ 1437.083160][T12742] loop0: detected capacity change from 0 to 8 [ 1438.324345][T12742] squashfs image failed sanity check [ 1439.793459][T12517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1439.859440][T12517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1439.892518][T12517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1439.932996][T12517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1440.215800][T12517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.264197][T12517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.330829][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.338053][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.402616][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.409904][ T9309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.211816][T12517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.381311][T12517] veth0_vlan: entered promiscuous mode [ 1444.423304][T12517] veth1_vlan: entered promiscuous mode [ 1444.552895][T12517] veth0_macvtap: entered promiscuous mode [ 1444.580576][T12517] veth1_macvtap: entered promiscuous mode [ 1444.655351][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.695555][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.725900][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.769298][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.794747][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.830177][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.868078][T12517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.911368][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.954268][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.988997][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.024858][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.065554][T12517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1445.101196][T12517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.156087][T12517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.194076][T12517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.227088][T12517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.249498][T12517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.258349][T12517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.522156][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.560419][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.658543][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.698080][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.823011][T12806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1119'. [ 1453.871474][T12834] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1460.765697][T12874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1172'. [ 1470.873076][T12921] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1485.566317][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.585385][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.011273][T13009] loop0: detected capacity change from 0 to 1024 [ 1487.127530][T13009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1487.217234][T13009] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1487.383163][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'. [ 1487.576908][ T8863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1498.232692][T13065] loop9: detected capacity change from 0 to 128 [ 1498.259684][T13065] EXT4-fs: Ignoring removed nobh option [ 1498.330116][T13065] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1498.390495][T13065] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1498.662662][ T8533] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1499.806014][T13077] loop9: detected capacity change from 0 to 512 [ 1499.879552][T13077] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1499.953904][T13077] EXT4-fs (loop9): orphan file too big: 8388608 [ 1499.977196][T13077] EXT4-fs (loop9): mount failed [ 1522.542271][T11551] Bluetooth: hci0: command 0x0406 tx timeout [ 1522.702308][T13158] loop3: detected capacity change from 0 to 256 [ 1522.778708][T13158] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1522.839254][T12074] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1523.089737][T12074] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1523.123410][T12074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.191927][T12074] usb 2-1: config 0 descriptor?? [ 1525.777623][T12074] usb 2-1: Cannot set autoneg [ 1525.799099][T12074] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 1525.839630][ T8865] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 1525.862811][T12074] usb 2-1: USB disconnect, device number 5 [ 1531.750488][T13191] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1227'. [ 1531.839218][T13191] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1532.273317][T13191] loop9: detected capacity change from 0 to 1024 [ 1532.456750][T13191] hfsplus: invalid file type 0113366 for inode 2 [ 1532.529169][T13191] hfsplus: failed to load root directory [ 1535.132422][T13209] loop1: detected capacity change from 0 to 128 [ 1535.313217][T13212] loop3: detected capacity change from 0 to 512 [ 1535.566215][T13212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1535.699231][T13212] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1535.877209][T12517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.070611][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.077010][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.584347][T13265] loop3: detected capacity change from 0 to 512 [ 1550.673324][T13265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1550.779985][T13265] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1551.200762][T12517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.140773][T13273] trusted_key: encrypted_key: keylen parameter is missing [ 1560.216402][T13296] loop9: detected capacity change from 0 to 512 [ 1562.622453][T13304] loop0: detected capacity change from 0 to 128 [ 1563.424412][T13309] loop1: detected capacity change from 0 to 1024 [ 1565.141053][T13309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1565.229165][T13309] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1565.600614][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1268'. [ 1566.137114][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1566.561511][T11551] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1566.571986][T11551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1566.580492][T11551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1566.589887][T11551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1566.597919][T11551] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1566.607138][T11551] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1566.972189][T13324] loop9: detected capacity change from 0 to 512 [ 1567.257645][T13324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1567.270756][T13324] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1567.450136][T13332] loop3: detected capacity change from 0 to 8 [ 1567.473013][T13332] squashfs image failed sanity check [ 1567.588352][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.633240][T13297] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1567.684763][T13318] chnl_net:caif_netlink_parms(): no params data found [ 1570.217462][T11551] Bluetooth: hci1: command tx timeout [ 1572.274135][ T3451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.303847][T11551] Bluetooth: hci1: command tx timeout [ 1572.682578][ T3451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.759542][T13318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.769261][T13318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.776549][T13318] bridge_slave_0: entered allmulticast mode [ 1572.850742][T13318] bridge_slave_0: entered promiscuous mode [ 1572.882977][T13318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.902688][T13318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.927124][T13318] bridge_slave_1: entered allmulticast mode [ 1574.080615][T13318] bridge_slave_1: entered promiscuous mode [ 1574.286729][ T3451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.379525][T11551] Bluetooth: hci1: command tx timeout [ 1574.688800][ T3451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.872301][T13318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.901045][T13318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.459129][T11551] Bluetooth: hci1: command tx timeout [ 1577.075482][T13318] team0: Port device team_slave_0 added [ 1577.102523][T13318] team0: Port device team_slave_1 added [ 1577.222918][T13318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.279884][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.369307][T13318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.404917][T13318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.459390][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.554361][T13318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.697262][T13360] loop9: detected capacity change from 0 to 1024 [ 1577.797613][T13360] hfsplus: failed to load root directory [ 1578.046069][T13318] hsr_slave_0: entered promiscuous mode [ 1578.139628][T13318] hsr_slave_1: entered promiscuous mode [ 1578.432014][T13369] loop9: detected capacity change from 0 to 512 [ 1578.747632][T13369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.847711][T13369] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.068114][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.122839][T13318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1590.187121][T13318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1592.189487][T13318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1592.237503][T13318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1592.334599][ T3451] hsr_slave_0: left promiscuous mode [ 1592.364036][T13404] loop9: detected capacity change from 0 to 1024 [ 1592.373239][ T3451] hsr_slave_1: left promiscuous mode [ 1592.421571][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.434795][T13404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.459215][T13404] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.487764][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.511166][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.518650][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.680081][ T3451] bridge_slave_1: left allmulticast mode [ 1592.685818][ T3451] bridge_slave_1: left promiscuous mode [ 1592.735311][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.769030][T13404] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1291'. [ 1592.782748][ T3451] bridge_slave_0: left allmulticast mode [ 1592.818767][ T3451] bridge_slave_0: left promiscuous mode [ 1592.839743][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.979898][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1593.161138][ T3451] veth1_macvtap: left promiscuous mode [ 1593.166767][ T3451] veth0_macvtap: left promiscuous mode [ 1593.203353][ T3451] veth1_vlan: left promiscuous mode [ 1593.455801][T13412] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1294'. [ 1594.979524][ T3451] veth0_vlan: left promiscuous mode [ 1596.909900][T13419] blktrace: Concurrent blktraces are not allowed on loop6 [ 1597.473482][T13419] relay: one or more items not logged [item size (56) > sub-buffer size (14)] [ 1604.587452][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 1605.445906][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 1608.847778][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.854595][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.150370][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.356605][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.910409][ T3451] bond0 (unregistering): Released all slaves [ 1616.204728][T13318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.315654][T13318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.402251][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.409514][ T8180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.451070][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.458282][ T8180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.698648][T13318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1617.882039][ T3451] IPVS: stop unused estimator thread 0... [ 1617.939028][T13470] loop9: detected capacity change from 0 to 512 [ 1618.067181][T13470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.163831][T13470] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.515757][T13318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1618.638363][T13318] veth0_vlan: entered promiscuous mode [ 1618.669826][T13318] veth1_vlan: entered promiscuous mode [ 1618.683576][ T5809] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1618.763530][T13318] veth0_macvtap: entered promiscuous mode [ 1618.797657][T13318] veth1_macvtap: entered promiscuous mode [ 1618.853330][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.898927][ T5809] usb 10-1: Using ep0 maxpacket: 32 [ 1618.904452][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.946307][ T5809] usb 10-1: config 8 has an invalid interface number: 97 but max is 0 [ 1618.962031][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1618.979370][ T5809] usb 10-1: config 8 has no interface number 0 [ 1618.985675][ T5809] usb 10-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1619.007862][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.025791][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.038085][ T5809] usb 10-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1619.054567][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.810698][ T5809] usb 10-1: config 8 interface 97 has no altsetting 0 [ 1620.822460][ T5809] usb 10-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 1620.831793][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.850178][T13318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1620.866349][ T5809] usb 10-1: Product: syz [ 1620.890658][ T5809] usb 10-1: Manufacturer: syz [ 1620.921653][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.938707][ T5809] usb 10-1: SerialNumber: syz [ 1620.963701][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.974228][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.992605][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.002994][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.014465][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.058035][ T5809] usb 10-1: can't set config #8, error -71 [ 1621.073113][T13318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1621.102813][ T5809] usb 10-1: USB disconnect, device number 2 [ 1621.180003][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.191403][T13318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.260205][T13318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.455011][T13318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.495636][T13318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.558084][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.619228][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.760931][ T9315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.793478][ T9315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.565379][T13521] loop2: detected capacity change from 0 to 1024 [ 1629.759548][T13521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1629.797815][T13526] loop9: detected capacity change from 0 to 1024 [ 1629.891505][T13318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.326124][T11551] Bluetooth: hci2: unexpected event for opcode 0x080e [ 1638.100067][T13551] loop2: detected capacity change from 0 to 128 [ 1638.155434][T13551] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1638.192788][T13551] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1639.845394][T13318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1642.500078][T13566] loop3: detected capacity change from 0 to 256 [ 1647.572413][T13593] loop1: detected capacity change from 0 to 128 [ 1647.670827][T13593] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1647.731569][T13593] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1648.076249][T11547] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1648.729862][T13602] loop2: detected capacity change from 0 to 8 [ 1648.802898][T13602] squashfs image failed sanity check [ 1659.213524][T13630] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1660.054000][T13633] loop9: detected capacity change from 0 to 8 [ 1660.093125][T13633] squashfs image failed sanity check [ 1669.327548][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.333973][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.051488][T13670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1359'. [ 1672.832747][T13674] loop2: detected capacity change from 0 to 2048 [ 1672.960575][T13674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1673.632504][T13677] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1673.767241][T13318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.969101][T13682] loop3: detected capacity change from 0 to 8 [ 1674.139345][T13682] squashfs image failed sanity check [ 1678.696559][T13697] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1687.044105][T13718] loop9: detected capacity change from 0 to 2048 [ 1688.219330][T13718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.200487][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.260974][T13733] loop3: detected capacity change from 0 to 8 [ 1689.319718][T13733] squashfs image failed sanity check [ 1692.142148][ T8865] Bluetooth: hci1: command 0x0406 tx timeout [ 1698.445884][T13754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1383'. [ 1700.227628][T13758] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1704.791922][T13773] loop2: detected capacity change from 0 to 2048 [ 1708.810513][T13773] EXT4-fs: error -4 creating inode table initialization thread [ 1708.874482][T13773] EXT4-fs (loop2): mount failed [ 1709.705287][T13791] loop1: detected capacity change from 0 to 8 [ 1709.749165][T13791] squashfs image failed sanity check [ 1710.641536][T13710] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1711.152041][T13795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1392'. [ 1726.038646][T13834] loop2: detected capacity change from 0 to 8 [ 1726.163653][T13834] squashfs image failed sanity check [ 1728.045934][T13838] loop1: detected capacity change from 0 to 512 [ 1728.226063][T13838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1728.259033][T13838] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1728.469916][T13842] loop1: detected capacity change from 512 to 1 [ 1728.500522][T13843] syz.1.1397: attempt to access beyond end of device [ 1728.500522][T13843] loop1: rw=14337, sector=80, nr_sectors = 4 limit=1 [ 1728.586330][T13843] Buffer I/O error on dev loop1, logical block 20, lost sync page write [ 1728.623936][T13843] EXT4-fs error (device loop1): ext4_handle_dirty_dirblock:440: inode #18: block 20: comm syz.1.1397: IO error syncing itable block [ 1728.727700][T13843] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.1397: Error while async write back metadata [ 1729.035378][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.150487][T11547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1730.706515][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.712974][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.746480][T11547] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 1730.780881][T11547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1730.799720][T11547] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1730.885089][T13839] kmmpd-loop1: attempt to access beyond end of device [ 1730.885089][T13839] loop1: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 1730.903165][T13839] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 1735.027257][T13856] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1402'. [ 1746.327650][T13900] loop3: detected capacity change from 0 to 8 [ 1746.410068][T13900] squashfs image failed sanity check [ 1750.219877][T13909] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1416'. [ 1754.970126][T13917] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1762.724837][T13948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1429'. [ 1765.401157][T13955] loop9: detected capacity change from 0 to 8 [ 1765.472953][T13955] squashfs image failed sanity check [ 1775.336317][T13988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1439'. [ 1779.054581][T13998] loop3: detected capacity change from 0 to 8 [ 1779.159337][T13998] squashfs image failed sanity check [ 1791.824727][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.831267][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.473034][T14034] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1448'. [ 1796.973715][ T8865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1797.000152][ T8865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1797.018320][ T8865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1797.029304][ T8865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1797.049068][ T8865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1797.057056][ T8865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1797.691867][T14052] loop1: detected capacity change from 0 to 8 [ 1797.839311][T14052] squashfs image failed sanity check [ 1798.193190][T14044] chnl_net:caif_netlink_parms(): no params data found [ 1798.867148][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.939265][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.946575][T14044] bridge_slave_0: entered allmulticast mode [ 1799.025462][T14044] bridge_slave_0: entered promiscuous mode [ 1799.063035][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.070773][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.078568][T14044] bridge_slave_1: entered allmulticast mode [ 1799.090225][T14044] bridge_slave_1: entered promiscuous mode [ 1799.099266][ T8865] Bluetooth: hci3: command tx timeout [ 1799.144576][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.158740][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.285274][T14044] team0: Port device team_slave_0 added [ 1799.332817][T14044] team0: Port device team_slave_1 added [ 1799.509055][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.516094][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.688810][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.709148][T14061] loop9: detected capacity change from 0 to 1024 [ 1799.735625][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.770376][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.931632][T14061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1799.983683][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.059162][T14061] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1801.885555][ T8865] Bluetooth: hci3: command tx timeout [ 1801.960149][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1802.115021][T14044] hsr_slave_0: entered promiscuous mode [ 1802.164192][T14044] hsr_slave_1: entered promiscuous mode [ 1802.595399][T14044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1802.649357][T14044] Cannot create hsr debugfs directory [ 1804.022037][ T8865] Bluetooth: hci3: command tx timeout [ 1806.059049][ T8865] Bluetooth: hci3: command tx timeout [ 1808.231382][T14085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1459'. [ 1811.000047][ T9305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.783233][ T9305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.889331][T14101] loop9: detected capacity change from 0 to 8 [ 1813.897833][T14095] loop1: detected capacity change from 0 to 1024 [ 1813.915671][T14101] squashfs image failed sanity check [ 1813.970068][ T9305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.139289][T14078] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1814.234253][T14095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1814.570968][ T9305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.699454][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1815.013009][T14044] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1815.109678][T14044] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1815.204448][T14044] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1815.260550][T14044] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1819.857902][T14116] loop3: detected capacity change from 0 to 1024 [ 1820.048247][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1820.066956][T14116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1820.139215][T14116] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1820.454886][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1820.503967][T12517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1820.639091][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.646308][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1820.737101][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.744366][ T9301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1821.067817][T14122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1469'. [ 1822.975910][T14044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1825.709335][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1829.076797][T14149] loop9: detected capacity change from 0 to 1024 [ 1829.380254][T14149] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1829.849978][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1829.854243][T14156] loop3: detected capacity change from 0 to 8 [ 1829.915120][T14044] veth0_vlan: entered promiscuous mode [ 1829.964836][T14156] squashfs image failed sanity check [ 1830.053308][T14044] veth1_vlan: entered promiscuous mode [ 1830.128141][ T9305] hsr_slave_0: left promiscuous mode [ 1830.243603][ T9305] hsr_slave_1: left promiscuous mode [ 1830.365466][ T9305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.398899][ T9305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.419845][ T9305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.440039][ T9305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1832.141412][ T9305] bridge_slave_1: left allmulticast mode [ 1832.188883][ T9305] bridge_slave_1: left promiscuous mode [ 1832.229242][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.391977][ T9305] bridge_slave_0: left allmulticast mode [ 1832.397674][ T9305] bridge_slave_0: left promiscuous mode [ 1832.435077][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.909838][ T9305] veth1_macvtap: left promiscuous mode [ 1833.915473][ T9305] veth0_macvtap: left promiscuous mode [ 1833.964588][ T9305] veth1_vlan: left promiscuous mode [ 1833.999022][ T9305] veth0_vlan: left promiscuous mode [ 1834.041418][T14168] loop3: detected capacity change from 0 to 1024 [ 1834.484684][T14168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1834.578616][T14168] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.614834][T14171] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1835.442244][T12517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1836.233169][T14183] input: syz0 as /devices/virtual/input/input15 [ 1837.818974][ T27] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1837.997878][ T27] usb 10-1: device descriptor read/64, error -71 [ 1838.429188][ T27] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1838.638902][ T27] usb 10-1: device descriptor read/64, error -71 [ 1838.889444][ T27] usb usb10-port1: attempt power cycle [ 1840.989420][ T27] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1843.190645][T14198] loop1: detected capacity change from 0 to 8 [ 1843.212226][T14198] squashfs image failed sanity check [ 1843.509818][ T9305] team0 (unregistering): Port device team_slave_1 removed [ 1844.431098][ T9305] team0 (unregistering): Port device team_slave_0 removed [ 1845.012781][ T9305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1845.564520][ T9305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1846.990954][ T27] usb 10-1: device descriptor read/8, error -110 [ 1848.819037][ T27] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1848.974315][ T27] usb 10-1: device descriptor read/8, error -32 [ 1849.099091][ T27] usb usb10-port1: unable to enumerate USB device [ 1851.766742][ T9305] bond0 (unregistering): Released all slaves [ 1852.054067][T14213] loop3: detected capacity change from 0 to 1024 [ 1852.160282][T14213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1852.219267][T14213] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1852.239576][T11551] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1852.257482][T11551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1852.279950][T11551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1852.302753][T11551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1852.329506][T11551] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1852.336908][T11551] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1852.590335][T12517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1854.485098][ T8865] Bluetooth: hci1: command tx timeout [ 1854.493992][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.509366][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.066019][T14218] chnl_net:caif_netlink_parms(): no params data found [ 1855.439926][T11551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1855.448633][T11551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1855.458841][T11551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1855.525302][T11551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1855.533237][T11551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1855.540787][T11551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1857.492247][ T8865] Bluetooth: hci1: command tx timeout [ 1857.679340][T11551] Bluetooth: hci5: command tx timeout [ 1857.708419][T14218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.749363][T14218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.756661][T14218] bridge_slave_0: entered allmulticast mode [ 1857.820437][T14218] bridge_slave_0: entered promiscuous mode [ 1857.869572][T14218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.876777][T14218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.948600][T14218] bridge_slave_1: entered allmulticast mode [ 1857.978866][T14218] bridge_slave_1: entered promiscuous mode [ 1858.670103][T14218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1858.738433][T14218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1859.031572][T14218] team0: Port device team_slave_0 added [ 1859.137438][T14218] team0: Port device team_slave_1 added [ 1859.589112][T11551] Bluetooth: hci1: command tx timeout [ 1859.684219][T14218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1859.708808][T14218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1859.761649][T11551] Bluetooth: hci5: command tx timeout [ 1859.858977][T14218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1860.117089][T14218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.158775][T14218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1860.239146][T14218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1860.614312][T14234] chnl_net:caif_netlink_parms(): no params data found [ 1860.706984][T14218] hsr_slave_0: entered promiscuous mode [ 1860.715528][T14218] hsr_slave_1: entered promiscuous mode [ 1861.432164][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.488937][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.496357][T14234] bridge_slave_0: entered allmulticast mode [ 1861.550667][T14234] bridge_slave_0: entered promiscuous mode [ 1861.597292][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.619450][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.659323][T11551] Bluetooth: hci1: command tx timeout [ 1861.664989][T14234] bridge_slave_1: entered allmulticast mode [ 1861.696826][T14234] bridge_slave_1: entered promiscuous mode [ 1861.788545][T14261] loop3: detected capacity change from 0 to 1024 [ 1861.818965][T11551] Bluetooth: hci5: command tx timeout [ 1862.038564][T14261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1862.094105][T13575] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.108674][T14261] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1862.267296][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.323206][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.977963][T14264] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1863.999179][T11551] Bluetooth: hci5: command tx timeout [ 1864.302164][T12517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1864.647637][T13575] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.641488][T13575] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.044033][T14234] team0: Port device team_slave_0 added [ 1867.071824][T14234] team0: Port device team_slave_1 added [ 1867.252606][T13575] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.739891][T14234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.746919][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.865966][T14234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1867.913066][T14234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1867.945533][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.028159][T14234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1868.524494][T14234] hsr_slave_0: entered promiscuous mode [ 1868.594244][T14234] hsr_slave_1: entered promiscuous mode [ 1868.649238][T14234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1868.656880][T14234] Cannot create hsr debugfs directory [ 1869.810451][T14277] loop1: detected capacity change from 0 to 512 [ 1869.839756][T14277] ext4: Unknown parameter 'func' [ 1871.462405][T14218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1871.540838][T14218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1872.328137][T14218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1872.390387][T14218] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1872.796066][T14286] loop1: detected capacity change from 0 to 1024 [ 1872.998321][T14286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1873.515024][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.523017][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.980926][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1877.080238][T14298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1502'. [ 1877.886914][T14218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.939540][T14218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1878.020711][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.027901][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.112762][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.120026][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.800754][T14234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1878.927784][T14218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1878.979097][T14218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1879.048988][T14234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1879.122404][T14234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1879.392166][T14234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1879.589264][T13575] hsr_slave_0: left promiscuous mode [ 1879.678957][T13575] hsr_slave_1: left promiscuous mode [ 1879.709434][T13575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1879.759479][T13575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1879.789736][T13575] bridge_slave_1: left allmulticast mode [ 1879.795465][T13575] bridge_slave_1: left promiscuous mode [ 1879.809907][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.859868][T13575] bridge_slave_0: left allmulticast mode [ 1879.865600][T13575] bridge_slave_0: left promiscuous mode [ 1879.887002][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.933195][T13575] hsr_slave_0: left promiscuous mode [ 1879.939844][T13575] hsr_slave_1: left promiscuous mode [ 1880.013732][T13575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1880.048863][T13575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.069885][T13575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1880.099049][T13575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1880.128915][T13575] bridge_slave_1: left allmulticast mode [ 1880.134641][T13575] bridge_slave_1: left promiscuous mode [ 1880.188950][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.229630][T13575] bridge_slave_0: left allmulticast mode [ 1880.235353][T13575] bridge_slave_0: left promiscuous mode [ 1880.268404][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1880.473823][T13575] veth1_vlan: left promiscuous mode [ 1880.510040][T13575] veth0_vlan: left promiscuous mode [ 1880.587140][T13575] veth1_macvtap: left promiscuous mode [ 1880.618983][T13575] veth0_macvtap: left promiscuous mode [ 1880.636686][T13575] veth1_vlan: left promiscuous mode [ 1880.646621][T13575] veth0_vlan: left promiscuous mode [ 1883.528995][ T5809] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1883.739344][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 1883.764699][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1883.811383][ T5809] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1883.841482][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.858890][ T5809] usb 2-1: Product: syz [ 1883.863233][ T5809] usb 2-1: Manufacturer: syz [ 1883.867870][ T5809] usb 2-1: SerialNumber: syz [ 1883.894167][ T5809] usb 2-1: config 0 descriptor?? [ 1883.909348][T14315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1883.922777][ T5809] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1884.190307][T11748] usb 2-1: USB disconnect, device number 6 [ 1887.521024][T13575] team0 (unregistering): Port device team_slave_1 removed [ 1887.762022][T13575] team0 (unregistering): Port device team_slave_0 removed [ 1887.971414][T13575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1888.290019][T13575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.232734][T14333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1511'. [ 1893.612527][T13575] bond0 (unregistering): Released all slaves [ 1897.819027][T14351] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1899.464392][T14360] loop1: detected capacity change from 0 to 1024 [ 1899.600356][T14360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1899.809818][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1902.273976][T13575] team0 (unregistering): Port device team_slave_1 removed [ 1902.564839][T13575] team0 (unregistering): Port device team_slave_0 removed [ 1902.981605][T13575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1903.187728][T13575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1906.944955][T13575] bond0 (unregistering): Released all slaves [ 1907.413617][T14386] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1908.147286][T14234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1908.246825][T14218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.325120][T14234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1908.392439][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.399773][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1908.426155][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.433416][ T9301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.515666][T14234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.218582][ T8865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1913.236031][ T8865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1913.244610][ T8865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1913.254331][ T8865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1913.289156][ T8865] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1913.296775][ T8865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1914.036019][T14418] loop1: detected capacity change from 0 to 512 [ 1914.376800][T14418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1914.459928][T14418] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1914.490138][ T8865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1914.574552][ T8865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1914.583179][ T8865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1914.591906][ T8865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1914.609935][ T8865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1914.619160][ T8865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1914.706028][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.712500][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.909186][T14418] loop1: detected capacity change from 512 to 1 [ 1914.985580][T14427] syz.1.1529: attempt to access beyond end of device [ 1914.985580][T14427] loop1: rw=14337, sector=80, nr_sectors = 4 limit=1 [ 1915.035095][T14427] Buffer I/O error on dev loop1, logical block 20, lost sync page write [ 1915.069225][T14427] EXT4-fs error (device loop1): ext4_handle_dirty_dirblock:440: inode #19: block 20: comm syz.1.1529: IO error syncing itable block [ 1915.112288][T14427] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.1529: Error while async write back metadata [ 1915.281856][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1915.349149][T11551] Bluetooth: hci1: command tx timeout [ 1915.366088][T11547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1915.474844][T11547] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 1916.999868][T11551] Bluetooth: hci3: command tx timeout [ 1917.031460][T11547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1917.159106][T11547] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1917.205791][T14413] chnl_net:caif_netlink_parms(): no params data found [ 1917.235223][T14421] kmmpd-loop1: attempt to access beyond end of device [ 1917.235223][T14421] loop1: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 1917.279102][T14421] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 1917.419202][T11551] Bluetooth: hci1: command tx timeout [ 1917.635831][T14434] Bluetooth: MGMT ver 1.22 [ 1917.817742][T14413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.859189][T14413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.866511][T14413] bridge_slave_0: entered allmulticast mode [ 1917.928947][T14413] bridge_slave_0: entered promiscuous mode [ 1918.028259][T14413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.044769][T14441] loop1: detected capacity change from 0 to 1024 [ 1918.059048][T14413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.066365][T14413] bridge_slave_1: entered allmulticast mode [ 1918.123463][T14413] bridge_slave_1: entered promiscuous mode [ 1918.170383][T14441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1918.406962][T14441] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.1533: Attempting to read directory block (623) that is past i_size (638464) [ 1918.501919][T14413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.559156][T14413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1918.646405][T11547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1918.855531][T14424] chnl_net:caif_netlink_parms(): no params data found [ 1919.018855][T11551] Bluetooth: hci3: command tx timeout [ 1919.025372][T14413] team0: Port device team_slave_0 added [ 1919.102564][T14413] team0: Port device team_slave_1 added [ 1920.246861][T11551] Bluetooth: hci1: command tx timeout [ 1920.806416][T14413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.825547][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.891235][T14413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.957309][T14459] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 1921.102930][T11551] Bluetooth: hci3: command tx timeout [ 1921.560720][T14413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1921.567750][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1921.657991][T14413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1921.676718][T14424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.684478][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.707783][T14424] bridge_slave_0: entered allmulticast mode [ 1921.738254][T14424] bridge_slave_0: entered promiscuous mode [ 1921.820026][T14424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.827331][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.855964][T14424] bridge_slave_1: entered allmulticast mode [ 1921.880670][T14424] bridge_slave_1: entered promiscuous mode [ 1922.065202][T14413] hsr_slave_0: entered promiscuous mode [ 1922.085095][T14413] hsr_slave_1: entered promiscuous mode [ 1923.689421][ T8865] Bluetooth: hci3: command tx timeout [ 1923.690164][T11551] Bluetooth: hci1: command tx timeout [ 1923.759129][T14413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1923.766776][T14413] Cannot create hsr debugfs directory [ 1924.086002][T14424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1924.132578][T14424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1926.155057][T14424] team0: Port device team_slave_0 added [ 1926.202678][T14424] team0: Port device team_slave_1 added [ 1926.518876][T13575] hsr_slave_0: left promiscuous mode [ 1926.549248][T13575] hsr_slave_1: left promiscuous mode [ 1926.568562][T13575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1926.609832][T13575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1926.629621][T13575] bridge_slave_1: left allmulticast mode [ 1926.635362][T13575] bridge_slave_1: left promiscuous mode [ 1926.658977][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.676745][T13575] bridge_slave_0: left allmulticast mode [ 1926.688808][T13575] bridge_slave_0: left promiscuous mode [ 1926.694627][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.120240][T14474] loop3: detected capacity change from 0 to 2048 [ 1927.224446][T14474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1927.320602][T14474] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1927.464452][T14480] loop1: detected capacity change from 0 to 512 [ 1927.474713][T14480] EXT4-fs: Ignoring removed mblk_io_submit option [ 1927.517715][T14480] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.1540: corrupted in-inode xattr: e_value size too large [ 1927.565610][T14480] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1540: couldn't read orphan inode 15 (err -117) [ 1927.592076][ T28] audit: type=1800 audit(1779534856.406:9): pid=14474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1539" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1927.660228][T14480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1927.686567][T14474] ================================================================== [ 1927.694712][T14474] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0xa10/0x1e90 [ 1927.702603][T14474] Read of size 18446744073709551600 at addr ffff88804e94feb8 by task syz.3.1539/14474 [ 1927.712171][T14474] [ 1927.714531][T14474] CPU: 1 PID: 14474 Comm: syz.3.1539 Not tainted syzkaller #0 [ 1927.722006][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1927.732099][T14474] Call Trace: [ 1927.735409][T14474] [ 1927.738361][T14474] dump_stack_lvl+0x18c/0x250 [ 1927.743133][T14474] ? __lock_acquire+0x7d40/0x7d40 [ 1927.748218][T14474] ? show_regs_print_info+0x20/0x20 [ 1927.753531][T14474] ? load_image+0x420/0x420 [ 1927.758101][T14474] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1927.763665][T14474] ? __virt_addr_valid+0x18c/0x540 [ 1927.768826][T14474] ? __virt_addr_valid+0x469/0x540 [ 1927.773972][T14474] print_report+0xa8/0x210 [ 1927.778445][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1927.783932][T14474] kasan_report+0x117/0x150 [ 1927.788496][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1927.793990][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1927.799479][T14474] kasan_check_range+0x241/0x290 [ 1927.804439][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1927.809926][T14474] __asan_memmove+0x29/0x70 [ 1927.814454][T14474] ext4_xattr_set_entry+0xa10/0x1e90 [ 1927.819797][T14474] ext4_xattr_ibody_set+0x254/0x6a0 [ 1927.825039][T14474] ext4_destroy_inline_data_nolock+0x23b/0x5e0 [ 1927.831260][T14474] ? ext4_destroy_inline_data+0xe0/0xe0 [ 1927.836835][T14474] ? down_write+0x16e/0x200 [ 1927.841365][T14474] ? ext4_journal_check_start+0x178/0x250 [ 1927.847143][T14474] ext4_destroy_inline_data+0x83/0xe0 [ 1927.852562][T14474] ext4_do_writepages+0x4f0/0x3990 [ 1927.857737][T14474] ? verify_lock_unused+0x140/0x140 [ 1927.862971][T14474] ? __lock_acquire+0x1347/0x7d40 [ 1927.868039][T14474] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 1927.874946][T14474] ? rcu_read_lock_any_held+0xb4/0x140 [ 1927.880492][T14474] ext4_writepages+0x1dd/0x350 [ 1927.885299][T14474] ? ext4_read_folio+0x2f0/0x2f0 [ 1927.890283][T14474] ? __rwlock_init+0x150/0x150 [ 1927.895079][T14474] ? ext4_da_get_block_prep+0xde1/0x1020 [ 1927.900747][T14474] ? do_raw_spin_unlock+0x121/0x230 [ 1927.905980][T14474] ? ext4_read_folio+0x2f0/0x2f0 [ 1927.910953][T14474] do_writepages+0x3b3/0x630 [ 1927.915627][T14474] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 1927.921380][T14474] ? __lock_acquire+0x7d40/0x7d40 [ 1927.926430][T14474] ? __rwlock_init+0x150/0x150 [ 1927.931220][T14474] ? do_raw_spin_unlock+0x121/0x230 [ 1927.936448][T14474] filemap_fdatawrite_wbc+0x122/0x180 [ 1927.941861][T14474] file_write_and_wait_range+0x197/0x280 [ 1927.947543][T14474] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 1927.952960][T14474] ? __might_sleep+0xe0/0xe0 [ 1927.957621][T14474] ? folio_unlock+0x118/0x2e0 [ 1927.962337][T14474] generic_buffers_fsync_noflush+0x6f/0x160 [ 1927.968292][T14474] ext4_sync_file+0x45b/0xd30 [ 1927.973010][T14474] ? trace_ext4_fsmap_mapping+0x210/0x210 [ 1927.978786][T14474] ? vfs_fsync_range+0xc3/0x1a0 [ 1927.983680][T14474] ext4_buffered_write_iter+0x2c0/0x350 [ 1927.989272][T14474] ext4_file_write_iter+0x1d9/0x1880 [ 1927.994600][T14474] ? plist_add+0x3d8/0x490 [ 1927.999081][T14474] ? verify_lock_unused+0x140/0x140 [ 1928.004310][T14474] ? schedule+0xc7/0x170 [ 1928.008579][T14474] ? ext4_file_read_iter+0x670/0x670 [ 1928.013889][T14474] ? common_file_perm+0x198/0x1f0 [ 1928.018985][T14474] do_iter_write+0x738/0xc30 [ 1928.023612][T14474] ? vfs_iter_write+0xa0/0xa0 [ 1928.028319][T14474] ? rcu_read_lock_any_held+0xb4/0x140 [ 1928.033899][T14474] do_pwritev+0x241/0x3a0 [ 1928.038258][T14474] ? do_preadv+0x390/0x390 [ 1928.042716][T14474] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1928.048731][T14474] ? lock_chain_count+0x20/0x20 [ 1928.053694][T14474] ? lockdep_hardirqs_on+0x98/0x150 [ 1928.058917][T14474] ? __x64_sys_pwritev2+0xbe/0x100 [ 1928.064058][T14474] do_syscall_64+0x55/0xb0 [ 1928.068493][T14474] ? clear_bhb_loop+0x40/0x90 [ 1928.073277][T14474] ? clear_bhb_loop+0x40/0x90 [ 1928.078002][T14474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1928.083971][T14474] RIP: 0033:0x7f7694f9ce59 [ 1928.088430][T14474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1928.108157][T14474] RSP: 002b:00007f7695f2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1928.116715][T14474] RAX: ffffffffffffffda RBX: 00007f7695215fa0 RCX: 00007f7694f9ce59 [ 1928.124749][T14474] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 1928.132765][T14474] RBP: 00007f7695032d6f R08: 0000000000000000 R09: 0000000000000003 [ 1928.140807][T14474] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 1928.148886][T14474] R13: 00007f7695216038 R14: 00007f7695215fa0 R15: 00007fff222eadf8 [ 1928.157027][T14474] [ 1928.160078][T14474] [ 1928.162446][T14474] The buggy address belongs to the physical page: [ 1928.168893][T14474] page:ffffea00013a53c0 refcount:3 mapcount:1 mapping:ffff8880200c5900 index:0x2 pfn:0x4e94f [ 1928.179340][T14474] memcg:ffff888024ad8000 [ 1928.183607][T14474] aops:def_blk_aops ino:700003 [ 1928.188514][T14474] flags: 0xfff5800002823c(referenced|uptodate|dirty|lru|workingset|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 1928.201154][T14474] page_type: 0x0() [ 1928.204903][T14474] raw: 00fff5800002823c ffffea0000d94688 ffffea00019bcf48 ffff8880200c5900 [ 1928.213516][T14474] raw: 0000000000000002 ffff8880511e7d98 0000000300000000 ffff888024ad8000 [ 1928.222122][T14474] page dumped because: kasan: bad access detected [ 1928.228566][T14474] page_owner tracks the page as allocated [ 1928.234297][T14474] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 14474, tgid 14473 (syz.3.1539), ts 1927175727834, free_ts 1927175219824 [ 1928.254997][T14474] post_alloc_hook+0x1c1/0x200 [ 1928.259806][T14474] get_page_from_freelist+0x1951/0x19e0 [ 1928.265379][T14474] __alloc_pages+0x1f0/0x460 [ 1928.269990][T14474] folio_alloc+0x1e/0x30 [ 1928.274253][T14474] filemap_alloc_folio+0xdf/0x490 [ 1928.279301][T14474] __filemap_get_folio+0x3ea/0xbb0 [ 1928.284439][T14474] __getblk_gfp+0x223/0x660 [ 1928.288981][T14474] __ext4_get_inode_loc+0x485/0xe00 [ 1928.294235][T14474] __ext4_iget+0x44f/0x3f40 [ 1928.298791][T14474] ext4_fill_super+0x503a/0x67b0 [ 1928.303773][T14474] get_tree_bdev+0x3f3/0x520 [ 1928.308410][T14474] vfs_get_tree+0x8c/0x280 [ 1928.312969][T14474] do_new_mount+0x24b/0xa40 [ 1928.317512][T14474] __se_sys_mount+0x2e7/0x3d0 [ 1928.322216][T14474] do_syscall_64+0x55/0xb0 [ 1928.326668][T14474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1928.332592][T14474] page last free stack trace: [ 1928.337286][T14474] free_unref_page_prepare+0x7b2/0x8c0 [ 1928.342790][T14474] free_unref_page_list+0xbe/0x860 [ 1928.347938][T14474] release_pages+0x1f7a/0x2200 [ 1928.352728][T14474] __folio_batch_release+0x71/0xe0 [ 1928.357878][T14474] shmem_undo_range+0x630/0x1b20 [ 1928.362858][T14474] shmem_evict_inode+0x245/0x9e0 [ 1928.367852][T14474] evict+0x4ca/0x8d0 [ 1928.371788][T14474] do_unlinkat+0x38c/0x590 [ 1928.376236][T14474] __x64_sys_unlink+0x49/0x50 [ 1928.380938][T14474] do_syscall_64+0x55/0xb0 [ 1928.385385][T14474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1928.391316][T14474] [ 1928.393668][T14474] Memory state around the buggy address: [ 1928.399317][T14474] ffff88804e94fd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1928.407404][T14474] ffff88804e94fe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1928.415573][T14474] >ffff88804e94fe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1928.423655][T14474] ^ [ 1928.429560][T14474] ffff88804e94ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1928.437650][T14474] ffff88804e94ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1928.445728][T14474] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1928.490227][T14480] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.1540: Logical block already allocated [ 1928.669100][T14474] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1928.676386][T14474] CPU: 1 PID: 14474 Comm: syz.3.1539 Not tainted syzkaller #0 [ 1928.683891][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1928.694080][T14474] Call Trace: [ 1928.697392][T14474] [ 1928.700353][T14474] dump_stack_lvl+0x18c/0x250 [ 1928.705083][T14474] ? show_regs_print_info+0x20/0x20 [ 1928.710321][T14474] ? load_image+0x420/0x420 [ 1928.714882][T14474] panic+0x2dc/0x730 [ 1928.718832][T14474] ? bpf_jit_dump+0xd0/0xd0 [ 1928.723387][T14474] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1928.729413][T14474] ? _raw_spin_unlock+0x40/0x40 [ 1928.734308][T14474] ? print_memory_metadata+0x314/0x400 [ 1928.739821][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1928.745409][T14474] check_panic_on_warn+0x84/0xa0 [ 1928.750392][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1928.755896][T14474] end_report+0x6f/0x130 [ 1928.760184][T14474] kasan_report+0x128/0x150 [ 1928.764739][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1928.770255][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1928.775763][T14474] kasan_check_range+0x241/0x290 [ 1928.780745][T14474] ? ext4_xattr_set_entry+0xa10/0x1e90 [ 1928.786258][T14474] __asan_memmove+0x29/0x70 [ 1928.790809][T14474] ext4_xattr_set_entry+0xa10/0x1e90 [ 1928.796143][T14474] ext4_xattr_ibody_set+0x254/0x6a0 [ 1928.801379][T14474] ext4_destroy_inline_data_nolock+0x23b/0x5e0 [ 1928.807571][T14474] ? ext4_destroy_inline_data+0xe0/0xe0 [ 1928.813149][T14474] ? down_write+0x16e/0x200 [ 1928.817676][T14474] ? ext4_journal_check_start+0x178/0x250 [ 1928.823430][T14474] ext4_destroy_inline_data+0x83/0xe0 [ 1928.828837][T14474] ext4_do_writepages+0x4f0/0x3990 [ 1928.833996][T14474] ? verify_lock_unused+0x140/0x140 [ 1928.839227][T14474] ? __lock_acquire+0x1347/0x7d40 [ 1928.844308][T14474] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 1928.851204][T14474] ? rcu_read_lock_any_held+0xb4/0x140 [ 1928.856700][T14474] ext4_writepages+0x1dd/0x350 [ 1928.861507][T14474] ? ext4_read_folio+0x2f0/0x2f0 [ 1928.866497][T14474] ? __rwlock_init+0x150/0x150 [ 1928.871297][T14474] ? ext4_da_get_block_prep+0xde1/0x1020 [ 1928.876961][T14474] ? do_raw_spin_unlock+0x121/0x230 [ 1928.882192][T14474] ? ext4_read_folio+0x2f0/0x2f0 [ 1928.887167][T14474] do_writepages+0x3b3/0x630 [ 1928.891794][T14474] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 1928.897545][T14474] ? __lock_acquire+0x7d40/0x7d40 [ 1928.902595][T14474] ? __rwlock_init+0x150/0x150 [ 1928.907392][T14474] ? do_raw_spin_unlock+0x121/0x230 [ 1928.912622][T14474] filemap_fdatawrite_wbc+0x122/0x180 [ 1928.918058][T14474] file_write_and_wait_range+0x197/0x280 [ 1928.923732][T14474] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 1928.929130][T14474] ? __might_sleep+0xe0/0xe0 [ 1928.933752][T14474] ? folio_unlock+0x118/0x2e0 [ 1928.938459][T14474] generic_buffers_fsync_noflush+0x6f/0x160 [ 1928.944399][T14474] ext4_sync_file+0x45b/0xd30 [ 1928.949105][T14474] ? trace_ext4_fsmap_mapping+0x210/0x210 [ 1928.954848][T14474] ? vfs_fsync_range+0xc3/0x1a0 [ 1928.959718][T14474] ext4_buffered_write_iter+0x2c0/0x350 [ 1928.965292][T14474] ext4_file_write_iter+0x1d9/0x1880 [ 1928.970607][T14474] ? plist_add+0x3d8/0x490 [ 1928.975049][T14474] ? verify_lock_unused+0x140/0x140 [ 1928.980308][T14474] ? schedule+0xc7/0x170 [ 1928.984570][T14474] ? ext4_file_read_iter+0x670/0x670 [ 1928.989873][T14474] ? common_file_perm+0x198/0x1f0 [ 1928.994927][T14474] do_iter_write+0x738/0xc30 [ 1928.999554][T14474] ? vfs_iter_write+0xa0/0xa0 [ 1929.004260][T14474] ? rcu_read_lock_any_held+0xb4/0x140 [ 1929.009754][T14474] do_pwritev+0x241/0x3a0 [ 1929.014122][T14474] ? do_preadv+0x390/0x390 [ 1929.018572][T14474] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1929.024582][T14474] ? lock_chain_count+0x20/0x20 [ 1929.029458][T14474] ? lockdep_hardirqs_on+0x98/0x150 [ 1929.034701][T14474] ? __x64_sys_pwritev2+0xbe/0x100 [ 1929.039864][T14474] do_syscall_64+0x55/0xb0 [ 1929.044332][T14474] ? clear_bhb_loop+0x40/0x90 [ 1929.049043][T14474] ? clear_bhb_loop+0x40/0x90 [ 1929.053749][T14474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1929.059670][T14474] RIP: 0033:0x7f7694f9ce59 [ 1929.064113][T14474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.083755][T14474] RSP: 002b:00007f7695f2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1929.092199][T14474] RAX: ffffffffffffffda RBX: 00007f7695215fa0 RCX: 00007f7694f9ce59 [ 1929.100196][T14474] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 1929.108188][T14474] RBP: 00007f7695032d6f R08: 0000000000000000 R09: 0000000000000003 [ 1929.116199][T14474] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 1929.124213][T14474] R13: 00007f7695216038 R14: 00007f7695215fa0 R15: 00007fff222eadf8 [ 1929.132223][T14474] [ 1929.136108][T14474] Kernel Offset: disabled [ 1929.140444][T14474] Rebooting in 86400 seconds..