last executing test programs: 3m55.31254838s ago: executing program 2 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 3m54.84766715s ago: executing program 2 (id=173): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/119, 0x0, 0x4000}) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) 3m54.591085526s ago: executing program 2 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3m54.255959804s ago: executing program 2 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x0, 0x400000001, 0x4, 0x100000000, 0x4, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3m53.855980823s ago: executing program 2 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x8, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m53.409764003s ago: executing program 32 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x8, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m44.128440767s ago: executing program 5 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "59eb04ea5cb36f7c2e2e1b9e6c"}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) 1m43.881278793s ago: executing program 5 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x80000004}) timer_create(0x6, 0x0, &(0x7f0000000380)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8921, 0x0) ptrace(0x10, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1m42.692607079s ago: executing program 5 (id=1132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f8b000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 1m41.511896686s ago: executing program 5 (id=1135): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)={[{@acl}, {@auto_da_alloc}, {@bh}, {@acl}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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") r0 = fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fanotify_mark(r2, 0x21, 0x8000000, r2, 0x0) fanotify_mark(r2, 0x22, 0x4000003b, r2, 0x0) r3 = socket(0x10, 0x80000000000802, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000200)={{@_ha_fsid={[0xdff, 0x800]}, {0x7, 0x9, 0x80000001, 0x3e}}, {{[0x8, 0x6, 0x3]}, 0x0, 0x2, 0x200, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x0, 0x5]}, {0x1ff, 0xd, 0x3, 0xb18}}, 0x8fa4, 0x0, 'inlinecrypt'}, {{@_ha_fsid={[0x5, 0x734]}, {0x8, 0x8, 0xffff, 0x2}}, 0xffffffff, 0x0, '\'%.\x00'}, {{@align=0x392, {0x9, 0xd, 0xfff, 0x2}}, 0x0, 0x0, '-::-\x00'}, {{@_ha_fsid={[0x6, 0x3]}, {0xc, 0x7, 0x9, 0x1ff}}, 0x0, 0x0, '*\x00'}]}}) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900090035000800060000001900150004000000000000dc1338d54400009b84136ef75a0184de4411001600c43ab8220000060cb211d2f994", 0x55}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m41.071472236s ago: executing program 5 (id=1140): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000200)={[{@init_itable_val}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}, {@minixdf}]}, 0x3, 0x436, &(0x7f0000000d80)="$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") ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m39.928989582s ago: executing program 5 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x4, 0x269, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000029113200000000008510000002000000850000000500000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2bce}, 0x94) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0xfffffffffffffffe, &(0x7f0000000200)=@secondary) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{0xa}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4125d1161bd96fd9767ce39152"}]}, 0x44}}, 0x84) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r9, r9) write$P9_RMKNOD(r9, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x8, 0x2, 0x3}}, 0x14) 1m38.637516881s ago: executing program 33 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x4, 0x269, &(0x7f0000000840)="$eJzs2k1rXFUYB/DnNpVMUtOJ+EYL4kEX6ubSxK2LBmlBDCjaCFWQ3pqJDrnOhNwhMCKalW79CK7FpTtBunSTjZ/AhbuAZFlBvDKZtEmG0WAIZii/3+Y+3HP+M8/hzMthmN3Xvvl0fa3K14peXMiyyK7HdtzPYj4uxAPb8cpLt39+7t3b77+5tLx8452Ubi7dWlhMKV1+/qcPPv/+hXu9S+/9cPnH6diZ/3B3b/G3nWd2ruz+deuTdpXaVep0e6lId7vdXnG3bKXVdrWep/R22SqqVmp3qtbmsfG1srux0U9FZ3VudmOzVVWp6PTTequfet3U2+yn4uOi3Ul5nqe52WCgccrcynf36zr26sfuRF3XM9/GpXsx92s0I3siZTMHk7Ire3XdPMNumRz/sv9PXs+evpM9uz26/1Pn2S9n68iHeiOi/HprZSsbXofjS2vRjjJacS2a8WcMXiYHhvXNN5ZvXEv75uOr8sutlUFycJ06nl+IZsyPzy8M8+l4fjpmj+YXoxlPRXbQ9rH84th8I15+8Ug+j2b88lF0o4zV/Qc4zH+xkNLrby2P5K/uzwMAeNTk6aGx57c8/6fxYf4/nA9HzlcX4+rF8107EVX/s/WiLFubJxWNOHmO4lTF1GlSjZiM5k8oZkbvNCJiEhp7UPx+8EYYGZo+i6eI7YiHd159fFKWfFhsDYo/6roe1/xYtV9/HimHm36quG9wAAAAAAAAAACAc/J//NPwvNcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMtr8DAAD//wsAx24=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000029113200000000008510000002000000850000000500000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2bce}, 0x94) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0xfffffffffffffffe, &(0x7f0000000200)=@secondary) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{0xa}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4125d1161bd96fd9767ce39152"}]}, 0x44}}, 0x84) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r9, r9) write$P9_RMKNOD(r9, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x8, 0x2, 0x3}}, 0x14) 1m21.473447541s ago: executing program 4 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x2000, 0x0}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, 0x0, 0x801) openat$ptmx(0xffffffffffffff9c, 0x0, 0x141941, 0x0) syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x212, &(0x7f0000000780)="$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") 1m20.231569069s ago: executing program 4 (id=1257): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r5, 0x4b45, 0x2) r6 = syz_clone(0x800, &(0x7f0000002240), 0x0, &(0x7f0000002300), &(0x7f0000002340), 0x0) ptrace$poke(0x5, r6, 0x0, 0x81) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000036c0)=""/4092, 0xffc}], 0x1, 0x515e, 0xfffffffc) syz_open_dev$usbfs(&(0x7f00000002c0), 0x4, 0x80000) 1m18.958280608s ago: executing program 4 (id=1263): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 1m17.694354087s ago: executing program 4 (id=1266): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) chmod(0x0, 0x104) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 1m17.184616038s ago: executing program 4 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "59eb04ea5cb36f7c2e2e1b9e6c"}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) 1m15.561319775s ago: executing program 4 (id=1276): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0xb, 0x30, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001, {[@timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0x8, [{@private=0xa010100, 0x80000001}]}]}}, {0x4, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100, @val=0x80}}}}}}}, 0x0) 1m15.204224163s ago: executing program 34 (id=1276): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0xb, 0x30, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001, {[@timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0x8, [{@private=0xa010100, 0x80000001}]}]}}, {0x4, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100, @val=0x80}}}}}}}, 0x0) 1m12.70828729s ago: executing program 6 (id=1292): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 1m12.337211298s ago: executing program 6 (id=1295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x400000, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x40}}, 0x4) 1m11.883642419s ago: executing program 6 (id=1298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "59eb04ea5cb36f7c2e2e1b9e6c"}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) 1m10.728724785s ago: executing program 6 (id=1300): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m9.682847688s ago: executing program 6 (id=1303): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0xa00, 0x70bd2d, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x40, 0x2, 0x1, 0xfd, 0x6, 0xb00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8811) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, 0x0) dup(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000359000/0x1000)=nil) shmat(r7, &(0x7f000029f000/0x3000)=nil, 0xf000) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r3, 0x0, 0xd) 1m8.840043958s ago: executing program 6 (id=1309): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001dc0)=""/60) 1m8.091190175s ago: executing program 35 (id=1309): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001dc0)=""/60) 1m6.609473328s ago: executing program 3 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m6.203948838s ago: executing program 3 (id=1319): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1m5.616289531s ago: executing program 3 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) 1m5.347957947s ago: executing program 3 (id=1323): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f00000022c0)=ANY=[], 0x2, 0xc36, &(0x7f0000002540)="$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") mkdir(&(0x7f0000000040)='./control\x00', 0x0) rmdir(&(0x7f0000000280)='./control\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000", @ANYRES16=0x0], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 1m2.265097997s ago: executing program 3 (id=1331): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x1, 0x6f2, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r0, 0x84) 1m0.631897404s ago: executing program 3 (id=1335): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[], 0x20}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00003ab000/0x1000)=nil, &(0x7f00003a3000/0xc00000)=nil, &(0x7f000084e000/0x3000)=nil, &(0x7f0000858000/0x3000)=nil, &(0x7f000056b000/0x2000)=nil, &(0x7f0000628000/0x2000)=nil, &(0x7f0000945000/0x2000)=nil, &(0x7f0000dcb000/0x2000)=nil, &(0x7f0000f6b000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000574000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.241726633s ago: executing program 36 (id=1335): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[], 0x20}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00003ab000/0x1000)=nil, &(0x7f00003a3000/0xc00000)=nil, &(0x7f000084e000/0x3000)=nil, &(0x7f0000858000/0x3000)=nil, &(0x7f000056b000/0x2000)=nil, &(0x7f0000628000/0x2000)=nil, &(0x7f0000945000/0x2000)=nil, &(0x7f0000dcb000/0x2000)=nil, &(0x7f0000f6b000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000574000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.763935582s ago: executing program 9 (id=1453): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xa9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x11, r2, 0x4000) 29.585577399s ago: executing program 9 (id=1457): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 29.247187236s ago: executing program 9 (id=1461): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) capset(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r1, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1, 0x1}, 0x8) 28.939906173s ago: executing program 9 (id=1465): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 28.392561986s ago: executing program 9 (id=1469): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/91) 26.884219909s ago: executing program 9 (id=1478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b46"], 0x0}, 0x0) 26.288244173s ago: executing program 37 (id=1478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b46"], 0x0}, 0x0) 11.711858794s ago: executing program 7 (id=1541): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/91) 8.481058818s ago: executing program 7 (id=1554): pipe(&(0x7f0000019480)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 7.270476895s ago: executing program 1 (id=1558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.220936576s ago: executing program 7 (id=1559): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000380)=ANY=[], 0x40, 0x72f, &(0x7f00000003c0)="$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") setxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 6.319058156s ago: executing program 7 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@local}, 0x14) 4.41391877s ago: executing program 1 (id=1566): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000002480)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@snap={0x1, 0x0, "f6", "7aab6b", 0xec2c}}}}}, 0x0) 4.019502508s ago: executing program 7 (id=1569): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, 0x0, 0x4000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f000000a4c0)={0x2020}, 0xa5) 3.864680172s ago: executing program 8 (id=1570): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff25", 0x5c}], 0x1}}], 0x1, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x456}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 3.859329032s ago: executing program 1 (id=1571): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@mblk_io_submit}, {@noblock_validity}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) write$rfkill(r0, &(0x7f0000000140)={0x8, 0x6}, 0xfe76) chdir(0x0) fallocate(r0, 0x0, 0xfff, 0x9) 3.663941967s ago: executing program 0 (id=1572): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x101, 0x3, 0x7}) 3.546824209s ago: executing program 8 (id=1573): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x0, 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x94) mount$tmpfs(0x0, 0x0, 0x0, 0x2000001, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@loopback, @rand_addr=' \x01\x00', @empty, 0x1, 0x7, 0x7, 0x0, 0x8, 0x2}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x40000000002, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x81000000, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000100000, 0x80000000be, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 3.357099044s ago: executing program 0 (id=1574): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0xb}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000000040)=""/135, 0x87) 3.329906194s ago: executing program 2 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x4, 0x269, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) 3.116075579s ago: executing program 1 (id=1575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52) 3.050320001s ago: executing program 0 (id=1576): mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f0000000000)=ANY=[@ANYBLOB='mode']) 2.946276403s ago: executing program 8 (id=1577): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x20004040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.946071503s ago: executing program 7 (id=1578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@local}, 0x14) 2.547801172s ago: executing program 0 (id=1579): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x1}, {0x0}, {&(0x7f0000001000)}], 0x4) 2.448428784s ago: executing program 8 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(0x0, 0x10000, 0x505402) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0x7c, 0x0, 0x7fff0000}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) semctl$GETALL(0x0, 0x0, 0xd, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x143100, 0x0) 2.312843907s ago: executing program 1 (id=1581): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000c00)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbtYkZaV/NN22+X6g7HRnnszM7iY8u7Czde/N02rZtcqmKYm0SkJkTbZFcruljpHONuGXU9JrTa5O/vh84c79BzcLxeLcgup8YfFaXlWnL354/vLtpY/Nybvvpt+Py2bu4db3/JfN/zfPbe0shp9eb6rRpXq9aZYcW5crbtVSve3YxrW1UnPtRl992amvrLTV1JanMisN23XV1NpatdvarGuz0Vbz2FRqalmWTmVk2IweOqK0vrBgCgMZDOIwEbWz0SiY0cjK0vpxDAoAAJwsg8j/Rw6Q/z+puFpxtbZf/p8Q8v/B8fP/ncikEWdDcvcGoGAyne9vP/J/AAAAAAAAAAAAAAAAAAAAAABOg23Py3qelw234d+4iKRFJPw/7nFiMI5w/kdiHC7+sZ4X99IizutWqVUKtkF9oSwVccSWmaTIT/966AjK8zeKczPqy8mGs9qJ918SHA/jQ7no+NkgXnviV1ulpGR6+89LVv6Ljs/viU+KSKuUkiuXe+ItycqnR1IXR5b967ob/2pW9fqt4p7+J/x2AAAAAACcBZb+luu//w1Wk7QsDZcN2VMf7Ow+H5DsPs8HVDZS0o0fk/Nj8c0bAAAAAIBh4rZfVI3j2I3TWkh2JnLcvR/10KVE5IQcukMXrHRwrCOq0hLu8TxvdbfR33eaEJGYZvrtz1dU+NDqpJyUwxS+PgvGfpDGcfwaAQAAABikbtIf90gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABheB108LGx/lLXHerob7e998hhnCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMTvVwAAAP//G5URgQ==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='./bus\x00') 2.117288292s ago: executing program 0 (id=1582): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x2f}) 1.367958399s ago: executing program 8 (id=1583): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x101, 0x3, 0x7}) 1.206120483s ago: executing program 1 (id=1584): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x400, 0x48940) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/91) 1.202258893s ago: executing program 8 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 0s ago: executing program 0 (id=1586): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x7) kernel console output (not intermixed with test programs): 231.415672][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 231.658452][ T7782] fuse: Bad value for 'fd' [ 231.857050][ T7786] loop3: detected capacity change from 0 to 256 [ 231.931609][ T7788] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.1075'. [ 231.958685][ T7786] exFAT-fs (loop3): hint_cluster is invalid (17) [ 231.967701][ T7788] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.1075'. [ 232.126015][ T7793] loop3: detected capacity change from 0 to 512 [ 232.149637][ T7794] loop4: detected capacity change from 0 to 256 [ 232.153297][ T7793] EXT4-fs: Ignoring removed nobh option [ 232.221869][ T7794] FAT-fs (loop4): Directory bread(block 64) failed [ 232.251830][ T7794] FAT-fs (loop4): Directory bread(block 65) failed [ 232.258532][ T7794] FAT-fs (loop4): Directory bread(block 66) failed [ 232.266556][ T7794] FAT-fs (loop4): Directory bread(block 67) failed [ 232.273603][ T7794] FAT-fs (loop4): Directory bread(block 68) failed [ 232.280681][ T7794] FAT-fs (loop4): Directory bread(block 69) failed [ 232.287316][ T7794] FAT-fs (loop4): Directory bread(block 70) failed [ 232.303188][ T4318] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 232.311988][ T7794] FAT-fs (loop4): Directory bread(block 71) failed [ 232.341508][ T7793] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 232.352659][ T7793] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1077: invalid indirect mapped block 256 (level 1) [ 232.367449][ T7794] FAT-fs (loop4): Directory bread(block 72) failed [ 232.383068][ T7794] FAT-fs (loop4): Directory bread(block 73) failed [ 232.443974][ T7793] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1077: invalid indirect mapped block 2683928664 (level 1) [ 232.472554][ T7793] EXT4-fs (loop3): 1 truncate cleaned up [ 232.478284][ T7793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.500222][ T7793] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1077: Invalid block bitmap block 3 in block_group 0 [ 232.519848][ T4318] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 232.547884][ T4318] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 232.587009][ T4318] usb 1-1: config 0 has no interface number 0 [ 232.617419][ T4318] usb 1-1: config 0 has no interface number 1 [ 232.630513][ T4318] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 232.659889][ T4318] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 232.689013][ T4318] usb 1-1: config 0 interface 255 has no altsetting 0 [ 232.700748][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 232.708397][ T4318] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 232.727612][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.762277][ T4318] usb 1-1: Product: syz [ 232.777181][ T4318] usb 1-1: Manufacturer: syz [ 232.784826][ T4318] usb 1-1: SerialNumber: syz [ 232.810871][ T4318] usb 1-1: config 0 descriptor?? [ 232.854841][ T4318] usb 1-1: selecting invalid altsetting 0 [ 232.870003][ T4318] usb 1-1: Could not set interface, error -22 [ 232.966183][ T7812] loop1: detected capacity change from 0 to 256 [ 233.017322][ T7812] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 233.048968][ T4318] usb 1-1: USB disconnect, device number 5 [ 233.290419][ T7820] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.1087'. [ 233.322224][ T26] audit: type=1326 audit(1783492364.577:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.4.1085" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2d3d9de59 code=0x0 [ 233.363255][ T7820] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.1087'. [ 234.119150][ T7829] loop0: detected capacity change from 0 to 512 [ 234.167266][ T7829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.227177][ T7829] EXT4-fs (loop0): 1 truncate cleaned up [ 234.249932][ T7829] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 234.594506][ T7845] loop1: detected capacity change from 0 to 1024 [ 234.631156][ T7845] EXT4-fs: Ignoring removed orlov option [ 234.697201][ T7845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.845884][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 234.901158][ T7855] loop3: detected capacity change from 0 to 1024 [ 235.058062][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 235.107755][ T7860] loop1: detected capacity change from 0 to 256 [ 235.181244][ T7860] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 235.256665][ T7866] loop0: detected capacity change from 0 to 128 [ 235.264528][ T7866] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 235.590277][ T4316] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 235.829328][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.886356][ T4316] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 235.984816][ T4316] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 236.169322][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.195645][ T4316] usb 5-1: config 0 descriptor?? [ 236.452960][ T26] audit: type=1326 audit(1783492367.707:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.1.1104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd65939de59 code=0x0 [ 237.040442][ T4316] usb 5-1: Direct firmware load for ar3k/ramps_0x00000000_26.dfu failed with error -2 [ 237.104542][ T4316] usb 5-1: Falling back to sysfs fallback for: ar3k/ramps_0x00000000_26.dfu [ 237.320475][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 238.097827][ T7916] loop3: detected capacity change from 0 to 128 [ 238.105583][ T7916] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 238.281716][ T7335] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.437175][ T7931] loop0: detected capacity change from 0 to 512 [ 239.473590][ T7931] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.534096][ T7931] EXT4-fs (loop0): 1 truncate cleaned up [ 239.562817][ T7931] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.630065][ T26] audit: type=1326 audit(1783492370.887:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.5.1123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01ff59de59 code=0x0 [ 239.959552][ T7948] loop4: detected capacity change from 0 to 128 [ 239.985859][ T7948] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 240.012120][ T7950] loop3: detected capacity change from 0 to 16 [ 240.039559][ T7950] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.213822][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 240.360953][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 240.630270][ T7964] loop3: detected capacity change from 0 to 128 [ 240.819899][ T7964] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 242.550736][ T26] audit: type=1326 audit(1783492373.807:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.0.1142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888939de59 code=0x0 [ 243.438466][ T8010] loop0: detected capacity change from 0 to 128 [ 243.452511][ T8010] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 244.475718][ T8016] xt_hashlimit: max too large, truncated to 1048576 [ 244.800525][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1152'. [ 247.348775][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.358068][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.449930][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.482411][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.492168][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 247.499476][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.790180][ T7897] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 247.908451][ T8062] loop3: detected capacity change from 0 to 128 [ 247.939534][ T8062] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 247.984864][ T7897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 248.152842][ T8048] chnl_net:caif_netlink_parms(): no params data found [ 248.192713][ T7897] usb 2-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice= 0.40 [ 248.201969][ T7897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.210094][ T7897] usb 2-1: Product: syz [ 248.216695][ T7897] usb 2-1: Manufacturer: syz [ 248.221688][ T7897] usb 2-1: SerialNumber: syz [ 248.426669][ T8072] fuse: Bad value for 'fd' [ 248.864697][ T7897] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 248.905705][ T7897] usb 2-1: USB disconnect, device number 5 [ 249.027043][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.034533][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.043396][ T8048] device bridge_slave_0 entered promiscuous mode [ 249.082426][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.089541][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.151549][ T8048] device bridge_slave_1 entered promiscuous mode [ 249.172221][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1166'. [ 249.200878][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.290781][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.313114][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.412645][ T8048] team0: Port device team_slave_0 added [ 249.435643][ T8048] team0: Port device team_slave_1 added [ 249.541638][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.550220][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 249.624630][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.720062][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.772012][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.786957][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.858931][ T8100] loop0: detected capacity change from 0 to 128 [ 249.868758][ T8097] loop1: detected capacity change from 0 to 764 [ 249.875557][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.888829][ T8100] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 249.992697][ T26] audit: type=1804 audit(1783492381.247:32): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1174" name="/newroot/253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=1048631 res=1 errno=0 [ 250.133937][ T8048] device hsr_slave_0 entered promiscuous mode [ 250.186721][ T8048] device hsr_slave_1 entered promiscuous mode [ 250.253228][ T8048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.285922][ T8100] syz.0.1174: attempt to access beyond end of device [ 250.285922][ T8100] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 250.312125][ T8048] Cannot create hsr debugfs directory [ 250.333800][ T8100] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 250.538827][ T4572] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 250.782651][ T8048] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 250.817093][ T8048] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.840225][ T8048] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.877692][ T8048] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.927576][ T8111] fuse: Unknown parameter 'fd0x0000000000000003' [ 250.989574][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.016588][ T8109] loop4: detected capacity change from 0 to 8192 [ 251.016780][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.041659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.052881][ T8048] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.090074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.098899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.117053][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.124271][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.157361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.170641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.183982][ T8113] loop0: detected capacity change from 0 to 128 [ 251.191071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.199840][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.206958][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.224432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.255674][ T8113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 251.267258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.280278][ T8113] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.360557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.422607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.457670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.479406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.508459][ T8048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.539287][ T8048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.566683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.575017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.586157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.596401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.605435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.623794][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1180'. [ 251.630246][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 251.635438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.687032][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 251.783960][ T8123] loop0: detected capacity change from 0 to 128 [ 251.857953][ T8123] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 251.879687][ T8123] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.999604][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 252.164265][ T8133] loop0: detected capacity change from 0 to 128 [ 252.201538][ T8133] EXT4-fs: Ignoring removed orlov option [ 252.218910][ T8133] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 252.237805][ T8133] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.369901][ T7897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 252.394832][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 252.561960][ T7897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.575281][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.586957][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.595595][ T7897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.608287][ T7897] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 252.622253][ T7897] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 252.633729][ T7897] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 252.646938][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.658350][ T7897] usb 2-1: config 1 interface 1 has no altsetting 1 [ 252.685443][ T7897] usb 2-1: string descriptor 0 read error: -22 [ 252.698710][ T7897] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 252.717929][ T7897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.811902][ T7897] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 252.856647][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.331481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.342386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.367257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.378412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.389518][ T8048] device veth0_vlan entered promiscuous mode [ 253.398002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.407805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.434379][ T8048] device veth1_vlan entered promiscuous mode [ 253.471992][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.486019][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.496967][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.513276][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.527339][ T8048] device veth0_macvtap entered promiscuous mode [ 253.540697][ T8048] device veth1_macvtap entered promiscuous mode [ 253.578334][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.593820][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.615191][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.636154][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.656596][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.677523][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.705094][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.710592][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 253.726347][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.806066][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.815876][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.832256][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.858677][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.899227][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.928643][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1192'. [ 253.972273][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.993035][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.022887][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.042474][ T8048] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.056045][ T8048] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.068076][ T8048] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.091687][ T8048] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.242329][ T6995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.264048][ T6995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.283888][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.365487][ T6995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.375045][ T6995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.387441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.535774][ T8177] loop3: detected capacity change from 0 to 512 [ 254.566337][ T8177] EXT4-fs (loop3): Test dummy encryption mode enabled [ 254.598954][ T8177] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1197: inode has both inline data and extents flags [ 254.642111][ T8177] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1197: couldn't read orphan inode 15 (err -117) [ 254.667321][ T8177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 254.810055][ T7897] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 254.851327][ T8177] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 254.898242][ T8177] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #18: block 36: comm syz.3.1197: lblock 0 mapped to illegal pblock 36 (length 1) [ 254.956737][ T56] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:4: Invalid inode table block 5 in block_group 0 [ 254.989145][ T56] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:4: Invalid inode table block 5 in block_group 0 [ 255.009521][ T56] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:4: Invalid inode table block 5 in block_group 0 [ 255.024741][ T7897] usb 7-1: config 0 has no interfaces? [ 255.033759][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 255.037054][ T7897] usb 7-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 255.066511][ T7897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.103747][ T7897] usb 7-1: config 0 descriptor?? [ 255.170590][ T4318] usb 2-1: USB disconnect, device number 6 [ 255.328938][ T8178] netlink: 'syz.6.1150': attribute type 3 has an invalid length. [ 255.380284][ T4315] usb 7-1: USB disconnect, device number 2 [ 255.398800][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 255.562568][ T8206] loop3: detected capacity change from 0 to 128 [ 255.592025][ T8206] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 255.722591][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.729066][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.792984][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 255.879343][ T8212] loop0: detected capacity change from 0 to 128 [ 255.914512][ T8212] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 255.927954][ T8212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.517107][ T8235] loop6: detected capacity change from 0 to 1024 [ 256.698326][ T8237] loop6: detected capacity change from 0 to 256 [ 256.755011][ T4870] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.106069][ T8249] loop3: detected capacity change from 0 to 128 [ 257.142117][ T8245] loop6: detected capacity change from 0 to 2048 [ 257.166969][ T8249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 257.185239][ T8245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.208360][ T8249] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.470346][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 258.601792][ T8277] loop1: detected capacity change from 0 to 512 [ 258.774854][ T8277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 258.934681][ T8277] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.334509][ T8277] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory [ 259.403783][ T8277] EXT4-fs error (device loop1): __ext4_unlink:3327: inode #2: comm syz.1.1232: mark_inode_dirty error [ 259.619546][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 259.640705][ T4282] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory [ 259.673687][ T4282] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 259.744910][ T8298] capability: warning: `syz.4.1238' uses deprecated v2 capabilities in a way that may be insecure [ 259.907451][ T8300] loop1: detected capacity change from 0 to 256 [ 259.944819][ T8300] exfat: Deprecated parameter 'namecase' [ 259.975311][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1241'. [ 259.994824][ T8303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.015454][ T8300] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 260.104208][ T8300] Cannot find del_set index 0 as target [ 260.266848][ T8303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.460455][ T8312] loop1: detected capacity change from 0 to 128 [ 260.486151][ T8312] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 260.522659][ T8316] loop0: detected capacity change from 0 to 512 [ 260.611230][ T8316] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.660765][ T8316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.776830][ T8316] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1246: invalid indirect mapped block 4294967295 (level 1) [ 260.995579][ T8316] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1246: invalid indirect mapped block 4294967295 (level 1) [ 261.224597][ T8316] EXT4-fs (loop0): 2 truncates cleaned up [ 261.363192][ T8316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.452035][ T8321] loop6: detected capacity change from 0 to 2048 [ 261.486798][ T8316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1246: bg 0: block 5: invalid block bitmap [ 261.509920][ T26] audit: type=1800 audit(1783492392.727:33): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1246" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 261.643873][ T8321] loop6: p1 < > p4 [ 261.643873][ T8321] p4: [ 261.668543][ T8321] loop6: p4 size 722688 extends beyond EOD, truncated [ 261.697179][ T8328] loop3: detected capacity change from 0 to 256 [ 261.705870][ T8321] loop6: p6 start 262464109 is beyond EOD, truncated [ 261.750040][ T8321] loop6: p7 size 2304 extends beyond EOD, truncated [ 261.767732][ T26] audit: type=1800 audit(1783492393.017:34): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1250" name="file1" dev="loop3" ino=1048649 res=0 errno=0 [ 261.898465][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 262.489667][ T8342] loop4: detected capacity change from 0 to 8 [ 262.584804][ T8342] SQUASHFS error: Failed to read block 0x6ee: -5 [ 262.591771][ T8342] SQUASHFS error: Unable to read metadata cache entry [6ec] [ 262.599142][ T8342] SQUASHFS error: Unable to read inode 0x127 [ 263.172523][ T7335] udevd[7335]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 263.186570][ T6580] udevd[6580]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 263.187158][ T4870] udevd[4870]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 263.211315][ T7334] udevd[7334]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 263.475400][ T7334] udevd[7334]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 263.512595][ T4781] udevd[4781]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 263.540934][ T7335] udevd[7335]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 263.557710][ T6580] udevd[6580]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 263.604065][ T8354] loop3: detected capacity change from 0 to 128 [ 263.697465][ T8354] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 264.720592][ T8370] loop6: detected capacity change from 0 to 256 [ 264.808119][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 264.825136][ T8370] FAT-fs (loop6): Directory bread(block 64) failed [ 264.831990][ T8370] FAT-fs (loop6): Directory bread(block 65) failed [ 264.838667][ T8370] FAT-fs (loop6): Directory bread(block 66) failed [ 264.846431][ T8370] FAT-fs (loop6): Directory bread(block 67) failed [ 264.853618][ T8370] FAT-fs (loop6): Directory bread(block 68) failed [ 264.860281][ T8370] FAT-fs (loop6): Directory bread(block 69) failed [ 264.867057][ T8370] FAT-fs (loop6): Directory bread(block 70) failed [ 264.873703][ T8370] FAT-fs (loop6): Directory bread(block 71) failed [ 264.880356][ T8370] FAT-fs (loop6): Directory bread(block 72) failed [ 264.886907][ T8370] FAT-fs (loop6): Directory bread(block 73) failed [ 265.600005][ T14] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 265.786624][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.813083][ T8380] loop4: detected capacity change from 0 to 256 [ 265.843506][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.863024][ T14] usb 4-1: config 1 has no interface number 0 [ 265.895093][ T8380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 265.909583][ T14] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.949131][ T8382] loop6: detected capacity change from 0 to 512 [ 265.957327][ T14] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 265.991404][ T8382] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 266.020932][ T14] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 266.108819][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.139416][ T8382] EXT4-fs (loop6): 1 truncate cleaned up [ 266.167516][ T8382] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 266.194111][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.237429][ T14] usb 4-1: Product: syz [ 266.263011][ T14] usb 4-1: Manufacturer: syz [ 266.289243][ T14] usb 4-1: SerialNumber: syz [ 266.339304][ T8362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.538930][ T8048] EXT4-fs (loop6): unmounting filesystem. [ 266.765225][ T8362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.242162][ T14] cdc_ncm 4-1:1.1: bind() failure [ 267.357617][ T8408] loop0: detected capacity change from 0 to 16 [ 267.420871][ T8408] erofs: (device loop0): mounted with root inode @ nid 36. [ 267.469586][ T4315] usb 4-1: USB disconnect, device number 7 [ 267.598556][ T8412] loop1: detected capacity change from 0 to 1024 [ 267.857801][ T8371] hfsplus: b-tree write err: -5, ino 8 [ 268.262106][ T8425] loop6: detected capacity change from 0 to 1764 [ 268.391886][ T8425] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 268.613769][ T8438] loop0: detected capacity change from 0 to 1024 [ 268.629346][ T8440] loop3: detected capacity change from 0 to 1024 [ 268.777434][ T26] audit: type=1800 audit(1783492400.037:35): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1283" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 268.954093][ T8438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 268.987104][ T8438] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.1278: lblock 2 mapped to illegal pblock 2 (length 1) [ 269.009484][ T8438] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 269.083294][ T8438] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.1278: lblock 0 mapped to illegal pblock 48 (length 1) [ 269.186483][ T8449] loop1: detected capacity change from 0 to 2048 [ 269.216092][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.234467][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.242613][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.251182][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.261732][ T8449] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.269774][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.280272][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.318804][ T8449] EXT4-fs: Ignoring removed bh option [ 269.336909][ T8438] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 269.402470][ T8438] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1278: Failed to acquire dquot type 0 [ 269.416235][ T8449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 269.487686][ T8438] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 269.501881][ T8449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1285: bg 0: block 234: padding at end of block bitmap is not set [ 269.593731][ T8438] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.1278: mark_inode_dirty error [ 269.627329][ T8449] EXT4-fs (loop1): Remounting filesystem read-only [ 269.678680][ T8438] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 269.720789][ T8438] EXT4-fs (loop0): 1 orphan inode deleted [ 269.726607][ T8438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 269.738305][ T33] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 269.807825][ T33] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 269.846409][ T33] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 269.870573][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 269.877412][ T8438] EXT4-fs (loop0): unmounting filesystem. [ 269.916917][ T8438] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.1278: Invalid inode table block 1 in block_group 0 [ 269.981406][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 270.041957][ T8438] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 270.190094][ T8438] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz.0.1278: mark_inode_dirty error [ 270.216504][ T8470] loop1: detected capacity change from 0 to 2048 [ 270.232726][ T8470] ext4: Bad value for 'commit' [ 270.349410][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.381128][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.421357][ T8452] device bridge_slave_0 entered promiscuous mode [ 270.481554][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.521306][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.591393][ T8452] device bridge_slave_1 entered promiscuous mode [ 270.715533][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.785655][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.957210][ T8452] team0: Port device team_slave_0 added [ 271.018916][ T8452] team0: Port device team_slave_1 added [ 271.120373][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.179263][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.244082][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.279645][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.310212][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 271.335669][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.362524][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.397264][ T8501] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 271.478952][ T8452] device hsr_slave_0 entered promiscuous mode [ 271.496679][ T8452] device hsr_slave_1 entered promiscuous mode [ 271.513046][ T8452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.533682][ T8452] Cannot create hsr debugfs directory [ 271.874866][ T8510] loop1: detected capacity change from 0 to 256 [ 272.029641][ T8510] FAT-fs (loop1): Directory bread(block 64) failed [ 272.036535][ T8510] FAT-fs (loop1): Directory bread(block 65) failed [ 272.043717][ T8510] FAT-fs (loop1): Directory bread(block 66) failed [ 272.050489][ T8510] FAT-fs (loop1): Directory bread(block 67) failed [ 272.057476][ T8510] FAT-fs (loop1): Directory bread(block 68) failed [ 272.064249][ T8510] FAT-fs (loop1): Directory bread(block 69) failed [ 272.071296][ T8510] FAT-fs (loop1): Directory bread(block 70) failed [ 272.078218][ T8510] FAT-fs (loop1): Directory bread(block 71) failed [ 272.085373][ T8510] FAT-fs (loop1): Directory bread(block 72) failed [ 272.092254][ T8510] FAT-fs (loop1): Directory bread(block 73) failed [ 273.151102][ T8522] loop3: detected capacity change from 0 to 8 [ 273.480689][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 273.533986][ T8522] SQUASHFS error: Failed to read block 0x6ee: -5 [ 273.540537][ T8522] SQUASHFS error: Unable to read metadata cache entry [6ec] [ 273.547979][ T8522] SQUASHFS error: Unable to read inode 0x127 [ 273.733602][ T8525] loop0: detected capacity change from 0 to 1024 [ 274.336669][ T8533] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 274.369955][ T8533] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 274.377868][ T8533] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1306'. [ 274.377897][ T8538] loop3: detected capacity change from 0 to 512 [ 274.440026][ T8534] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 274.447832][ T8534] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 274.508498][ T8534] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1306'. [ 274.518835][ T8543] loop0: detected capacity change from 0 to 512 [ 274.590469][ T8538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.604097][ T8538] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.622228][ T8538] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.1307: corrupted inode contents [ 274.638536][ T8538] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz.3.1307: mark_inode_dirty error [ 274.638868][ T8543] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 274.666033][ T8538] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.1307: corrupted inode contents [ 274.702778][ T8550] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.1307: corrupted inode contents [ 274.725826][ T8549] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 274.733320][ T8550] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz.3.1307: mark_inode_dirty error [ 274.759585][ T8550] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.1307: corrupted inode contents [ 274.885564][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 274.891717][ T8543] EXT4-fs (loop0): 1 truncate cleaned up [ 274.897453][ T8543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 274.938018][ T8543] EXT4-fs (loop0): shut down requested (1) [ 275.084850][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 275.172714][ T4330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.266508][ T8452] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.345825][ T4330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.397969][ T8452] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.414110][ T8452] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.492751][ T4330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.550162][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 275.552404][ T8452] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.603817][ T8573] loop1: detected capacity change from 0 to 256 [ 275.636828][ T8573] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 275.702261][ T4330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.742861][ T8573] exFAT-fs (loop1): invalid start cluster (520) [ 276.010455][ T7897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 276.127845][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.208007][ T7897] usb 1-1: Using ep0 maxpacket: 32 [ 276.215534][ T7897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 276.257868][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.282214][ T7897] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 276.310492][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.331875][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.340256][ T7897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.358406][ T7897] usb 1-1: Product: syz [ 276.379512][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.392867][ T7897] usb 1-1: Manufacturer: syz [ 276.397517][ T7897] usb 1-1: SerialNumber: syz [ 276.408884][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.419127][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.430411][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.438696][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.456446][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.465174][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.473146][ T7897] usb 1-1: config 0 descriptor?? [ 276.478440][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.489026][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.496244][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.504549][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.515428][ T8571] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 276.537145][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.610500][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.617711][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.715491][ T8567] loop0: detected capacity change from 0 to 32768 [ 276.729006][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.738117][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.792330][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.832017][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.859583][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.872780][ T8567] loop0: p1 p2 p3 < p5 > [ 276.899114][ T8567] loop0: p1 size 242222080 extends beyond EOD, truncated [ 276.963538][ T8567] loop0: p2 start 16777215 is beyond EOD, truncated [ 277.043075][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.055447][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.067769][ T4261] usb 1-1: USB disconnect, device number 6 [ 277.109169][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.156057][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.178143][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.195715][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.205376][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.231807][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.266568][ T8597] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 277.284873][ T8597] netlink: 'syz.3.1319': attribute type 4 has an invalid length. [ 277.294982][ T8597] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1319'. [ 277.323118][ T8598] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 277.331352][ T8598] netlink: 'syz.3.1319': attribute type 4 has an invalid length. [ 277.339235][ T8598] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1319'. [ 277.630009][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 278.068559][ T8615] loop3: detected capacity change from 0 to 2048 [ 278.155841][ T8615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.510094][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 278.554192][ T7334] udevd[7334]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 278.567665][ T4870] udevd[4870]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 278.613034][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 278.625547][ T6580] udevd[6580]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 278.843077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.863647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.014925][ T4314] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 279.113345][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.169692][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.187132][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.214842][ T4314] usb 4-1: Invalid ep0 maxpacket: 64 [ 279.235124][ T8581] device bridge_slave_0 entered promiscuous mode [ 279.364639][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.373166][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.380618][ T4314] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 279.389737][ T8581] device bridge_slave_1 entered promiscuous mode [ 279.453992][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.499179][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.550442][ T4330] device hsr_slave_0 left promiscuous mode [ 279.562943][ T4330] device hsr_slave_1 left promiscuous mode [ 279.582249][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.592121][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.599478][ T4314] usb 4-1: Invalid ep0 maxpacket: 64 [ 279.605141][ T4314] usb usb4-port1: attempt power cycle [ 279.612342][ T4330] device bridge_slave_1 left promiscuous mode [ 279.625812][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.658148][ T4330] device bridge_slave_0 left promiscuous mode [ 279.682582][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.750623][ T4330] device veth1_macvtap left promiscuous mode [ 279.763301][ T4330] device veth0_macvtap left promiscuous mode [ 279.769656][ T4330] device veth1_vlan left promiscuous mode [ 279.775961][ T4330] device veth0_vlan left promiscuous mode [ 280.015431][ T8660] loop1: detected capacity change from 0 to 1024 [ 280.060089][ T4314] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 280.079804][ T26] audit: type=1800 audit(1783492411.337:36): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1328" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 280.101480][ T4314] usb 4-1: Invalid ep0 maxpacket: 64 [ 280.250043][ T4314] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 280.280971][ T4314] usb 4-1: Invalid ep0 maxpacket: 64 [ 280.286523][ T4314] usb usb4-port1: unable to enumerate USB device [ 280.589953][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 280.816593][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 280.896013][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 280.944594][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.010942][ T4283] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 281.020482][ T4283] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 281.122431][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.268027][ T4330] bond0 (unregistering): Released all slaves [ 282.463197][ T8581] team0: Port device team_slave_0 added [ 282.555382][ T8581] team0: Port device team_slave_1 added [ 282.617239][ T8679] loop1: detected capacity change from 0 to 1024 [ 282.618293][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.634442][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.670397][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 282.687629][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.735548][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.743075][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.779749][ T8581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.983261][ T8581] device hsr_slave_0 entered promiscuous mode [ 283.007470][ T8581] device hsr_slave_1 entered promiscuous mode [ 283.058293][ T8581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.067850][ T8581] Cannot create hsr debugfs directory [ 283.081236][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.121036][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.228614][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.266761][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.293965][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.311173][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.340391][ T8452] device veth0_vlan entered promiscuous mode [ 283.387942][ T8452] device veth1_vlan entered promiscuous mode [ 283.439976][ T2169] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 283.460065][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.636773][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.652786][ T2169] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 283.683456][ T2169] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 283.699289][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.720326][ T2169] usb 2-1: config 1 interface 0 has no altsetting 0 [ 283.741142][ T2169] usb 2-1: string descriptor 0 read error: -22 [ 283.744798][ T8452] device veth0_macvtap entered promiscuous mode [ 283.747593][ T2169] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 283.798575][ T2169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.821231][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.823947][ T8452] device veth1_macvtap entered promiscuous mode [ 283.835685][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.843693][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.852255][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.860759][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.868169][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.939613][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.981660][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.999717][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.010842][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.020879][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.031782][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.041910][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.052567][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.064546][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.083841][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.102692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.121125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.130944][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.154736][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.178052][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.220810][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.247233][ T8452] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.265163][ T8452] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.275677][ T8452] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.285058][ T8452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.305239][ T8581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 284.325796][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x2 [ 284.345783][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.356122][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.364323][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.372389][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.379622][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.387353][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.394896][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.403290][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.417714][ T8699] loop0: detected capacity change from 0 to 512 [ 284.426442][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.434209][ T2169] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 284.441902][ T2169] logitech 0003:046D:C626.0007: global environment stack underflow [ 284.461612][ T2169] logitech 0003:046D:C626.0007: item 0 1 1 11 parsing failed [ 284.469593][ T2169] logitech 0003:046D:C626.0007: parse failed [ 284.476134][ T2169] logitech: probe of 0003:046D:C626.0007 failed with error -22 [ 284.545676][ T27] usb 2-1: USB disconnect, device number 7 [ 284.555944][ T8699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 284.576875][ T8581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 284.630063][ T8699] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.648987][ T8699] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1338: corrupted inode contents [ 284.661280][ T8699] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.1338: mark_inode_dirty error [ 284.675276][ T8699] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1338: corrupted inode contents [ 284.690831][ T8699] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1338: corrupted inode contents [ 284.703153][ T8699] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.1338: mark_inode_dirty error [ 284.706679][ T8581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 284.735682][ T8699] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1338: corrupted inode contents [ 284.750162][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 284.753268][ T8581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 284.874741][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 284.961168][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.969060][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.025063][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.101859][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.109752][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.210408][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.287756][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.361062][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.377893][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.424680][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.453768][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 285.478636][ T8719] loop7: detected capacity change from 0 to 512 [ 285.482589][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.509228][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.520578][ T8371] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.527758][ T8371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.558450][ T8719] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 285.588003][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.616950][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.663342][ T8719] EXT4-fs (loop7): 1 truncate cleaned up [ 285.688704][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.705888][ T8719] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 285.729226][ T8371] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.736524][ T8371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.744706][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.766695][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.971937][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 286.036982][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 286.325765][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.375088][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.506028][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.537644][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.561299][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.591323][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.615026][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.683898][ T8581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.740776][ T8734] loop1: detected capacity change from 0 to 512 [ 286.818808][ T8734] EXT4-fs: inline encryption not supported [ 286.834684][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.862127][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.887510][ T8734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.915283][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.933994][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.960119][ T8734] EXT4-fs (loop1): Invalid default hash set in the superblock [ 286.981174][ T8693] device bridge_slave_0 entered promiscuous mode [ 287.045732][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.080196][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.106156][ T8745] loop7: detected capacity change from 0 to 512 [ 287.120286][ T8693] device bridge_slave_1 entered promiscuous mode [ 287.156302][ T8747] loop0: detected capacity change from 0 to 128 [ 287.215953][ T8745] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 287.216112][ T8747] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 287.227913][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.252736][ T8745] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.336317][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.346227][ T8747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.352438][ T8745] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1347: corrupted inode contents [ 287.435424][ T8753] loop1: detected capacity change from 0 to 128 [ 287.442207][ T8745] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #2: comm syz.7.1347: mark_inode_dirty error [ 287.488034][ T8693] team0: Port device team_slave_0 added [ 287.503108][ T8753] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 287.520811][ T8745] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1347: corrupted inode contents [ 287.560549][ T8755] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1347: corrupted inode contents [ 287.572795][ T8693] team0: Port device team_slave_1 added [ 287.655343][ T8755] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #2: comm syz.7.1347: mark_inode_dirty error [ 287.676981][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.717425][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.754732][ T8755] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1347: corrupted inode contents [ 287.817684][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.831243][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.838255][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.880449][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.030629][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 288.078437][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 288.291002][ T8693] device hsr_slave_0 entered promiscuous mode [ 288.383992][ T8693] device hsr_slave_1 entered promiscuous mode [ 288.433706][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.456768][ T8765] loop7: detected capacity change from 0 to 512 [ 288.476968][ T8693] Cannot create hsr debugfs directory [ 288.603257][ T8765] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 288.654054][ T8765] EXT4-fs (loop7): 1 truncate cleaned up [ 288.667268][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.697495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.705724][ T8765] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 288.742660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.558118][ T8693] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 289.577383][ T8693] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 289.591125][ T8693] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 289.615534][ T8693] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 290.119904][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 290.464411][ T8787] loop1: detected capacity change from 0 to 1024 [ 290.473678][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.503361][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.527434][ T8787] hfsplus: unknown catalog record type 0 [ 290.541553][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.560917][ T8787] hfsplus: unknown catalog record type 0 [ 290.584272][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.680455][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.689409][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.720665][ T8787] hfsplus: xattr search failed [ 290.724281][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.732948][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.782204][ T8792] loop0: detected capacity change from 0 to 128 [ 290.795014][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.852636][ T8792] FAT-fs (loop0): Directory bread(block 162) failed [ 290.859356][ T8792] FAT-fs (loop0): Directory bread(block 163) failed [ 290.872306][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.897251][ T8792] FAT-fs (loop0): Directory bread(block 164) failed [ 290.901096][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.940791][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.948034][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.952266][ T8792] FAT-fs (loop0): Directory bread(block 165) failed [ 290.965978][ T8343] hfsplus: b-tree write err: -5, ino 3 [ 291.020028][ T8792] FAT-fs (loop0): Directory bread(block 166) failed [ 291.026726][ T8792] FAT-fs (loop0): Directory bread(block 167) failed [ 291.060391][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.069960][ T8792] FAT-fs (loop0): Directory bread(block 168) failed [ 291.076642][ T8792] FAT-fs (loop0): Directory bread(block 169) failed [ 291.124043][ T8792] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.146597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.162985][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.201938][ T8792] FAT-fs (loop0): Directory bread(block 162) failed [ 291.209064][ T8792] FAT-fs (loop0): Directory bread(block 163) failed [ 291.222751][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.276595][ T8792] syz.0.1357: attempt to access beyond end of device [ 291.276595][ T8792] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 291.291579][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.310455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.339277][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.357367][ T8792] syz.0.1357: attempt to access beyond end of device [ 291.357367][ T8792] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 291.371752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.391569][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.420438][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.440565][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.473728][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.803053][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.820299][ T8811] loop0: detected capacity change from 0 to 128 [ 291.843754][ T8811] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 291.854826][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.082935][ T8816] loop1: detected capacity change from 0 to 764 [ 292.097237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.142977][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.190947][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 292.219524][ T8581] device veth0_vlan entered promiscuous mode [ 292.570758][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.732805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.113346][ T8581] device veth1_vlan entered promiscuous mode [ 293.192956][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 293.237251][ T8581] device veth0_macvtap entered promiscuous mode [ 293.284266][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.302720][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.341702][ T8581] device veth1_macvtap entered promiscuous mode [ 293.396972][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.415456][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.476848][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.524564][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.575114][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.622418][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.632669][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.643913][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.654025][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.664602][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.674568][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.685081][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.696785][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.746323][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.778699][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.804057][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.832474][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.865645][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.877963][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.888035][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.902013][ T8581] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.915718][ T8581] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.925228][ T8581] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.934040][ T8581] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.950690][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.961728][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.978572][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.152581][ T8824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.200285][ T8824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.215330][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.725006][ T8842] loop0: detected capacity change from 0 to 1024 [ 294.788765][ T8842] EXT4-fs: Ignoring removed bh option [ 294.862472][ T8842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 294.946365][ T8585] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 295.021108][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 295.055977][ T8343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.066773][ T8343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.099954][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.121757][ T8849] loop7: detected capacity change from 0 to 512 [ 295.145853][ T8585] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.179903][ T8585] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.214922][ T8849] Quota error (device loop7): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 295.226594][ T8585] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 295.259972][ T8849] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 295.277000][ T8585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 295.306828][ T8585] usb 2-1: SerialNumber: syz [ 295.338031][ T8849] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1368: Failed to acquire dquot type 1 [ 295.388706][ T8849] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1368: bg 0: block 495: padding at end of block bitmap is not set [ 295.446708][ T8849] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 295.506785][ T8849] EXT4-fs (loop7): 1 truncate cleaned up [ 295.522961][ T8849] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 295.552550][ T8849] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.567997][ T8585] usb 2-1: 0:2 : does not exist [ 295.626401][ T8585] usb 2-1: USB disconnect, device number 8 [ 295.640026][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 295.648899][ T8849] Quota error (device loop7): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 295.748990][ T8849] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 295.780191][ T8849] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1368: Failed to acquire dquot type 1 [ 295.829981][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 295.841170][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.877557][ T27] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 295.911204][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.940856][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.972259][ T27] usb 1-1: config 0 descriptor?? [ 295.982958][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 296.111826][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.131091][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.144552][ T8871] loop7: detected capacity change from 0 to 128 [ 296.202763][ T8871] FAT-fs (loop7): Unrecognized mount option "01777777777777777777777" or missing value [ 296.230024][ T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 296.243588][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.288855][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.354145][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.435030][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.461695][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 296.468046][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 296.487359][ T27] usb 1-1: USB disconnect, device number 7 [ 296.554723][ T8693] device veth0_vlan entered promiscuous mode [ 296.597601][ T22] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 296.628080][ T8879] loop7: detected capacity change from 0 to 512 [ 296.640110][ T22] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 296.654139][ T8879] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 296.676339][ T8693] device veth1_vlan entered promiscuous mode [ 296.689539][ T22] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 296.739641][ T8879] EXT4-fs (loop7): 1 truncate cleaned up [ 296.766085][ T22] usb 9-1: config 220 has no interface number 2 [ 296.792659][ T8879] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 296.816879][ T22] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 296.850180][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.860763][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.008970][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.083369][ T22] usb 9-1: config 220 interface 0 has no altsetting 0 [ 297.090299][ T22] usb 9-1: config 220 interface 76 has no altsetting 0 [ 297.097721][ T22] usb 9-1: config 220 interface 1 has no altsetting 0 [ 297.108848][ T22] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 297.114882][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.135164][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.186584][ T22] usb 9-1: Product: syz [ 297.191202][ T22] usb 9-1: Manufacturer: syz [ 297.195839][ T22] usb 9-1: SerialNumber: syz [ 297.212507][ T8693] device veth0_macvtap entered promiscuous mode [ 297.249508][ T8693] device veth1_macvtap entered promiscuous mode [ 297.365439][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.421523][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.452881][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.492193][ T22] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 297.498630][ T22] usb 9-1: No valid video chain found. [ 297.519831][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.539947][ T22] usb 9-1: selecting invalid altsetting 0 [ 297.567677][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.600535][ T22] usb 9-1: selecting invalid altsetting 0 [ 297.606441][ T22] usbtest: probe of 9-1:220.1 failed with error -22 [ 297.619848][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.635405][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.661657][ T22] usb 9-1: USB disconnect, device number 2 [ 297.689137][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.719319][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.740818][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.758387][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.778869][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.792747][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.835113][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.852029][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.870670][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.890094][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.911962][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.933557][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.958069][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.986469][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.004690][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.046217][ T8693] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.060580][ T8693] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.100486][ T8693] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.109366][ T8693] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.436218][ T8905] netlink: 'syz.0.1379': attribute type 6 has an invalid length. [ 298.479834][ T8905] netlink: 'syz.0.1379': attribute type 7 has an invalid length. [ 298.510222][ T8905] netlink: 'syz.0.1379': attribute type 8 has an invalid length. [ 298.550168][ T8371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.558539][ T8371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.631114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.693071][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.707471][ T8910] loop1: detected capacity change from 0 to 512 [ 298.719822][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.727456][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.782672][ T8910] EXT4-fs: Ignoring removed orlov option [ 298.788497][ T8910] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.847134][ T8910] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1381: corrupted in-inode xattr [ 298.903088][ T8910] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1381: couldn't read orphan inode 15 (err -117) [ 298.936520][ T8913] loop0: detected capacity change from 0 to 128 [ 298.985231][ T8913] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 299.000474][ T8910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 299.364786][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 299.755542][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 299.781255][ T8932] loop0: detected capacity change from 0 to 1024 [ 299.788741][ T8932] EXT4-fs: Ignoring removed orlov option [ 299.924570][ T8932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 300.025753][ T8940] netlink: 'syz.9.1389': attribute type 4 has an invalid length. [ 300.034746][ T8940] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1389'. [ 300.059834][ T8937] netlink: 'syz.7.1387': attribute type 1 has an invalid length. [ 300.116551][ T8937] netlink: 'syz.7.1387': attribute type 4 has an invalid length. [ 300.183230][ T8937] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1387'. [ 300.206902][ T8932] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.1386: Invalid inode table block 9382788408579232086 in block_group 0 [ 300.254519][ T8946] loop9: detected capacity change from 0 to 256 [ 300.284766][ T8942] netlink: 'syz.7.1387': attribute type 1 has an invalid length. [ 300.343211][ T8942] netlink: 'syz.7.1387': attribute type 4 has an invalid length. [ 300.359154][ T8946] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 300.390127][ T8942] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1387'. [ 300.461101][ T8343] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm kworker/u4:12: Invalid inode table block 9382788408579232086 in block_group 0 [ 300.525941][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 300.733341][ T8952] loop7: detected capacity change from 0 to 512 [ 300.764551][ T8952] EXT4-fs: Ignoring removed orlov option [ 300.787966][ T8952] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.843617][ T8952] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.1392: corrupted in-inode xattr [ 300.889284][ T8952] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1392: couldn't read orphan inode 15 (err -117) [ 301.039894][ T8952] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 301.274394][ T8967] loop0: detected capacity change from 0 to 128 [ 301.290544][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 301.323217][ T8967] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 301.555847][ T8971] loop7: detected capacity change from 0 to 512 [ 301.650317][ T8971] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.749928][ T8971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.792217][ T4316] Bluetooth: Configuration file not found ar3k/ramps_0x00000000_26.dfu [ 301.800633][ T4316] Bluetooth: Loading sysconfig file failed [ 301.806496][ T4316] ath3k: probe of 5-1:0.0 failed with error -110 [ 301.865576][ T4316] usb 5-1: USB disconnect, device number 8 [ 301.871335][ T8971] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1398: invalid indirect mapped block 4294967295 (level 1) [ 301.902059][ T8971] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1398: invalid indirect mapped block 4294967295 (level 1) [ 301.947825][ T8983] loop8: detected capacity change from 0 to 512 [ 301.962330][ T8971] EXT4-fs (loop7): 2 truncates cleaned up [ 301.969350][ T8971] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 301.996979][ T8983] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 302.052253][ T8983] EXT4-fs (loop8): 1 truncate cleaned up [ 302.057981][ T8983] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 302.154032][ T8993] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 302.360652][ T8993] netlink: 'syz.1.1402': attribute type 4 has an invalid length. [ 302.416175][ T8993] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1402'. [ 302.425681][ T8997] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1402'. [ 302.578804][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 302.700836][ T9005] loop9: detected capacity change from 0 to 1024 [ 302.734001][ T9005] EXT4-fs: Ignoring removed bh option [ 302.832966][ T9005] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 302.859890][ T8586] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.065230][ T8586] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 303.085706][ T8586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.101072][ T8586] usb 1-1: Product: syz [ 303.110131][ T8586] usb 1-1: Manufacturer: syz [ 303.120081][ T8586] usb 1-1: SerialNumber: syz [ 303.142898][ T8586] usb 1-1: config 0 descriptor?? [ 303.164964][ T8586] ch341 1-1:0.0: ch341-uart converter detected [ 303.509115][ T8693] EXT4-fs (loop9): unmounting filesystem. [ 303.658608][ T9023] loop9: detected capacity change from 0 to 512 [ 303.694635][ T9023] ext4: Unknown parameter 'noacl' [ 303.943116][ T8581] EXT4-fs (loop8): unmounting filesystem. [ 304.216188][ T9036] loop8: detected capacity change from 0 to 128 [ 304.248879][ T9036] FAT-fs (loop8): Unrecognized mount option "01777777777777777777777" or missing value [ 304.485831][ T8586] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 304.794595][ T8586] usb 1-1: USB disconnect, device number 8 [ 304.906995][ T8586] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 305.023824][ T8586] ch341 1-1:0.0: device disconnected [ 305.057909][ T9042] loop8: detected capacity change from 0 to 512 [ 305.090982][ T9042] EXT4-fs: Ignoring removed nobh option [ 305.126414][ T9044] loop1: detected capacity change from 0 to 1024 [ 305.135888][ T9044] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 305.157495][ T9042] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 305.189548][ T9044] EXT4-fs (loop1): group descriptors corrupted! [ 305.196371][ T9042] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.350123][ T27] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 305.548386][ T27] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 305.653259][ T27] usb 10-1: config 0 interface 0 has no altsetting 0 [ 305.753219][ T27] usb 10-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 305.838372][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.916203][ T27] usb 10-1: config 0 descriptor?? [ 305.995625][ T8581] EXT4-fs (loop8): unmounting filesystem. [ 306.416369][ T27] wacom 0003:056A:00C6.0008: hidraw0: USB HID v0.7f Device [HID 056a:00c6] on usb-dummy_hcd.9-1/input0 [ 306.605980][ T27] usb 10-1: USB disconnect, device number 2 [ 306.646485][ T9082] loop1: detected capacity change from 0 to 128 [ 306.714407][ T9082] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 306.834208][ T9081] fido_id[9081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 307.046133][ T9093] loop1: detected capacity change from 0 to 512 [ 307.066824][ T9093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 307.812273][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 307.971445][ T9100] loop7: detected capacity change from 0 to 512 [ 307.997213][ T9105] loop1: detected capacity change from 0 to 128 [ 308.021184][ T9100] EXT4-fs: Ignoring removed nobh option [ 308.049897][ T9105] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 308.095010][ T9100] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 308.130143][ T9100] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.626772][ T4341] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 308.858127][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 308.992573][ T9121] loop0: detected capacity change from 0 to 256 [ 309.056384][ T9127] loop9: detected capacity change from 0 to 128 [ 309.101012][ T9127] FAT-fs (loop9): Unrecognized mount option "01777777777777777777777" or missing value [ 309.568149][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 309.578399][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 309.585997][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.596104][ T4273] Workqueue: hci3 hci_rx_work [ 309.600848][ T4273] Call Trace: [ 309.604170][ T4273] [ 309.607144][ T4273] dump_stack_lvl+0x188/0x24e [ 309.611888][ T4273] ? show_regs_print_info+0x12/0x12 [ 309.617145][ T4273] ? load_image+0x410/0x410 [ 309.621728][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 309.626903][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 309.631995][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 309.636729][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 309.641988][ T4273] kobject_add_internal+0x617/0xca0 [ 309.647238][ T4273] kobject_add+0x160/0x230 [ 309.651705][ T4273] ? kobject_init+0x1c0/0x1c0 [ 309.656440][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 309.661772][ T4273] ? klist_children_get+0x50/0x50 [ 309.666849][ T4273] ? get_device_parent+0x121/0x3e0 [ 309.672021][ T4273] device_add+0x470/0x1050 [ 309.676491][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 309.681483][ T4273] le_conn_complete_evt+0xf69/0x1560 [ 309.686830][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 309.693123][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 309.698817][ T4273] ? mutex_unlock+0x10/0x10 [ 309.703377][ T4273] ? skb_pull_data+0xec/0x1f0 [ 309.708109][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 309.713712][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 309.719850][ T4273] hci_event_packet+0x7b3/0x1290 [ 309.724854][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 309.729937][ T4273] ? bis_list+0x280/0x280 [ 309.734328][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 309.740285][ T4273] ? kcov_remote_start+0x4b0/0x7e0 [ 309.745465][ T4273] ? mt_dump_node+0x1330/0x1900 [ 309.750372][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 309.755625][ T4273] hci_rx_work+0x3eb/0xd40 [ 309.760090][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 309.765005][ T4273] ? process_one_work+0x7b4/0x1160 [ 309.770166][ T4273] process_one_work+0x8ab/0x1160 [ 309.775196][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 309.780901][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 309.785984][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 309.791583][ T4273] ? wq_worker_running+0x97/0x190 [ 309.796678][ T4273] worker_thread+0xaf5/0x12a0 [ 309.801451][ T4273] kthread+0x29d/0x330 [ 309.805563][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 309.810642][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 309.815281][ T4273] ret_from_fork+0x1f/0x30 [ 309.819779][ T4273] [ 309.830165][ T4273] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 309.843494][ T4273] Bluetooth: hci3: failed to register connection device [ 311.209887][ T4316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 311.242664][ T9172] loop7: detected capacity change from 0 to 512 [ 311.280753][ T9174] loop1: detected capacity change from 0 to 128 [ 311.288406][ T9174] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 311.310078][ T9172] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 311.471521][ T9172] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 311.492385][ T9178] loop9: detected capacity change from 0 to 256 [ 311.563843][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.577597][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.587637][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.600916][ T9172] EXT4-fs (loop7): 1 truncate cleaned up [ 311.606795][ T9172] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 311.621198][ T9178] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 311.638766][ T4316] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.648156][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.658002][ T4316] usb 1-1: config 0 descriptor?? [ 311.873300][ T9165] loop0: detected capacity change from 0 to 8 [ 311.915166][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 311.924434][ T9165] unable to read xattr id index table [ 312.163338][ T4316] plantronics 0003:047F:FFFF.0009: unbalanced delimiter at end of report description [ 312.211406][ T4316] plantronics 0003:047F:FFFF.0009: parse failed [ 312.217758][ T4316] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22 [ 312.361071][ T8586] usb 1-1: USB disconnect, device number 9 [ 312.513191][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1451'. [ 312.848106][ T9206] loop7: detected capacity change from 0 to 2048 [ 312.998261][ T9206] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 313.020137][ T9206] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.001924][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 314.375429][ T9232] loop0: detected capacity change from 0 to 512 [ 314.419600][ T9232] EXT4-fs: inline encryption not supported [ 314.453125][ T9232] ext4: Unknown parameter 'nouser_xattr' [ 314.534998][ T9238] loop9: detected capacity change from 0 to 256 [ 314.586922][ T9238] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 314.627025][ T9241] loop8: detected capacity change from 0 to 2048 [ 314.693331][ T9241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.905815][ T9260] loop0: detected capacity change from 0 to 512 [ 316.024373][ T9262] usb usb8: usbfs: process 9262 (syz.1.1473) did not claim interface 0 before use [ 316.033960][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 316.180640][ T9267] binder: BINDER_SET_CONTEXT_MGR already set [ 316.189134][ T9267] binder: 9265:9267 ioctl 4018620d 200000004a80 returned -16 [ 316.200111][ T9260] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1472: bg 0: block 473: padding at end of block bitmap is not set [ 316.263634][ T9260] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 316.287604][ T9260] EXT4-fs (loop0): 1 orphan inode deleted [ 316.293677][ T9260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 316.303528][ T4327] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 316.303572][ T9260] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.358202][ T4327] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 316.540375][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 316.580648][ T9] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 316.590618][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1 [ 316.695243][ T8343] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.942081][ T8343] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.158012][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.165346][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.203444][ T8343] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.532207][ T8343] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.637643][ T9295] loop7: detected capacity change from 0 to 512 [ 317.654852][ T9295] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 317.865211][ T9295] EXT4-fs (loop7): 1 orphan inode deleted [ 318.000295][ T9295] EXT4-fs (loop7): 1 truncate cleaned up [ 318.006334][ T9295] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 318.682049][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 318.863906][ T9314] loop7: detected capacity change from 0 to 512 [ 318.902327][ T9314] EXT4-fs: journaled quota format not specified [ 319.029901][ T22] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 319.182725][ T9318] loop7: detected capacity change from 0 to 16 [ 319.225904][ T9318] erofs: (device loop7): mounted with root inode @ nid 36. [ 319.230661][ T22] usb 9-1: Using ep0 maxpacket: 16 [ 319.279755][ T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.306417][ T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.317132][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.329228][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.338684][ T22] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 319.349589][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.358285][ T22] usb 9-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 319.358823][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.374332][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.378812][ T22] usb 9-1: Manufacturer: syz [ 319.386800][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.421896][ T22] usb 9-1: config 0 descriptor?? [ 319.786227][ T9339] loop0: detected capacity change from 0 to 16 [ 319.821914][ T9339] erofs: (device loop0): mounted with root inode @ nid 36. [ 319.863719][ T9341] loop1: detected capacity change from 0 to 256 [ 319.873626][ T22] creative-sb0540 0003:041E:3100.000A: unknown main item tag 0x0 [ 319.886785][ T22] creative-sb0540 0003:041E:3100.000A: unknown main item tag 0x0 [ 319.918420][ T22] creative-sb0540 0003:041E:3100.000A: unknown main item tag 0x0 [ 319.927263][ T22] creative-sb0540 0003:041E:3100.000A: unknown main item tag 0x0 [ 319.948270][ T9341] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 320.011890][ T22] creative-sb0540 0003:041E:3100.000A: No inputs registered, leaving [ 320.041345][ T22] creative-sb0540 0003:041E:3100.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 320.107876][ T22] usb 9-1: USB disconnect, device number 3 [ 320.268956][ T9348] loop0: detected capacity change from 0 to 512 [ 320.466938][ T9344] fido_id[9344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 320.561593][ T9348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 320.746501][ T9348] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.412933][ T9324] chnl_net:caif_netlink_parms(): no params data found [ 321.434508][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 321.470047][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 321.490164][ T9363] loop8: detected capacity change from 0 to 164 [ 321.561911][ T9363] Unsupported NM flag settings (240) [ 321.923827][ T9377] loop8: detected capacity change from 0 to 1024 [ 321.968623][ T9377] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 322.179166][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.197700][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.234403][ T9324] device bridge_slave_0 entered promiscuous mode [ 322.315669][ T8343] device hsr_slave_0 left promiscuous mode [ 322.331036][ T8343] device hsr_slave_1 left promiscuous mode [ 322.380801][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.408641][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.422138][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.438504][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.473824][ T8343] device bridge_slave_1 left promiscuous mode [ 322.502860][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.537241][ T8343] device bridge_slave_0 left promiscuous mode [ 322.551567][ T8581] EXT4-fs (loop8): unmounting filesystem. [ 322.563985][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.690974][ T8343] device veth1_macvtap left promiscuous mode [ 322.699357][ T8343] device veth0_macvtap left promiscuous mode [ 322.712559][ T8343] device veth1_vlan left promiscuous mode [ 322.726500][ T8343] device veth0_vlan left promiscuous mode [ 323.220060][ T4318] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 323.419879][ T4318] usb 9-1: Using ep0 maxpacket: 16 [ 323.429145][ T4318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.462305][ T4318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.500874][ T4318] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 323.530978][ T4318] usb 9-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 323.539272][ T4318] usb 9-1: Manufacturer: syz [ 323.558019][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 323.584958][ T4318] usb 9-1: config 0 descriptor?? [ 323.961131][ T9407] loop0: detected capacity change from 0 to 1024 [ 323.987199][ T9407] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 324.010979][ T4318] creative-sb0540 0003:041E:3100.000B: unknown main item tag 0x0 [ 324.029010][ T9407] EXT4-fs (loop0): group descriptors corrupted! [ 324.035891][ T4318] creative-sb0540 0003:041E:3100.000B: unknown main item tag 0x0 [ 324.056900][ T4318] creative-sb0540 0003:041E:3100.000B: unknown main item tag 0x0 [ 324.107279][ T4318] creative-sb0540 0003:041E:3100.000B: No inputs registered, leaving [ 324.358689][ T4318] creative-sb0540 0003:041E:3100.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 324.773303][ T4318] usb 9-1: USB disconnect, device number 4 [ 324.837794][ T9413] loop1: detected capacity change from 0 to 512 [ 324.945056][ T9413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 325.026451][ T9413] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1512: bg 0: block 393: padding at end of block bitmap is not set [ 325.067733][ T9416] fido_id[9416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 325.087280][ T9413] EXT4-fs (loop1): Remounting filesystem read-only [ 325.105860][ T9413] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 325.161471][ T9413] EXT4-fs (loop1): Remounting filesystem read-only [ 325.177550][ T9413] EXT4-fs (loop1): 2 truncates cleaned up [ 325.202413][ T9413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 325.362044][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 325.599709][ T8343] team0 (unregistering): Port device team_slave_1 removed [ 325.630337][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 325.679403][ T9431] loop8: detected capacity change from 0 to 1024 [ 325.714630][ T26] audit: type=1800 audit(1783492456.967:37): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1513" name="/" dev="fuse" ino=1 res=0 errno=0 [ 325.732583][ T9431] EXT4-fs: Ignoring removed bh option [ 325.761363][ T8343] team0 (unregistering): Port device team_slave_0 removed [ 325.848757][ T9431] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 325.929303][ T8343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.030905][ T8343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.502357][ T8581] EXT4-fs (loop8): unmounting filesystem. [ 326.666800][ T8343] bond0 (unregistering): Released all slaves [ 326.739350][ T9446] loop1: detected capacity change from 0 to 1024 [ 326.770810][ T9446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.819460][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.840156][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.875943][ T9324] device bridge_slave_1 entered promiscuous mode [ 326.988967][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.061237][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.114341][ T9451] loop1: detected capacity change from 0 to 512 [ 327.155423][ T9451] EXT4-fs: Ignoring removed nobh option [ 327.198636][ T9324] team0: Port device team_slave_0 added [ 327.242605][ T9451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 327.258452][ T9324] team0: Port device team_slave_1 added [ 327.311996][ T9451] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.005338][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 328.012405][ T4316] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 328.220028][ T4316] usb 9-1: Using ep0 maxpacket: 16 [ 328.227288][ T4316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.289874][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.307465][ T4316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.408358][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.434423][ T9324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.471581][ T4316] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 328.501688][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 328.547325][ T4316] usb 9-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 328.590006][ T4316] usb 9-1: Manufacturer: syz [ 328.607744][ T9469] loop7: detected capacity change from 0 to 1024 [ 328.641745][ T4316] usb 9-1: config 0 descriptor?? [ 328.661473][ T9469] EXT4-fs: Ignoring removed orlov option [ 328.697414][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.728710][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.786332][ T9469] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 328.893549][ T9324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.966501][ T9479] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1526: Invalid inode table block 9382788408579232086 in block_group 0 [ 329.056240][ T4316] creative-sb0540 0003:041E:3100.000C: unknown main item tag 0x0 [ 329.086687][ T4316] creative-sb0540 0003:041E:3100.000C: unknown main item tag 0x0 [ 329.114573][ T4316] creative-sb0540 0003:041E:3100.000C: unknown main item tag 0x0 [ 329.141477][ T4316] creative-sb0540 0003:041E:3100.000C: No inputs registered, leaving [ 329.168281][ T4316] creative-sb0540 0003:041E:3100.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 329.197166][ T9324] device hsr_slave_0 entered promiscuous mode [ 329.250137][ T4330] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm kworker/u4:7: Invalid inode table block 9382788408579232086 in block_group 0 [ 329.272236][ T4316] usb 9-1: USB disconnect, device number 5 [ 329.296467][ T9324] device hsr_slave_1 entered promiscuous mode [ 329.304533][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 329.343846][ T9324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.403207][ T9324] Cannot create hsr debugfs directory [ 329.618436][ T9486] fido_id[9486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 330.413239][ T26] audit: type=1800 audit(1783492461.667:38): pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1528" name="/" dev="fuse" ino=1 res=0 errno=0 [ 331.694355][ T9530] bridge4: port 1(bond1) entered blocking state [ 331.713285][ T9530] bridge4: port 1(bond1) entered disabled state [ 331.725042][ T9537] loop8: detected capacity change from 0 to 512 [ 331.732690][ T9530] device bond1 entered promiscuous mode [ 331.739317][ T9537] EXT4-fs: Ignoring removed oldalloc option [ 331.778580][ T9537] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 331.886673][ T9537] EXT4-fs (loop8): 1 truncate cleaned up [ 331.906945][ T9537] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 332.100294][ T8581] EXT4-fs (loop8): unmounting filesystem. [ 332.110584][ T9324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.140037][ T9324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.231781][ T9324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.262079][ T9324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.548276][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.568754][ T9555] device batadv_slave_1 entered promiscuous mode [ 332.580786][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1546'. [ 332.610001][ T9555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.852604][ T9555] device batadv_slave_1 left promiscuous mode [ 332.859737][ T9555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.023251][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.036623][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.058241][ T9324] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.121477][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.136194][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.168961][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.176254][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.224423][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.260932][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.290953][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.298134][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.338516][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.348399][ T26] audit: type=1800 audit(1783492464.607:39): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1547" name="/" dev="fuse" ino=1 res=0 errno=0 [ 333.378473][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.469904][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.509495][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.573129][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.592190][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.626836][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.675490][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.036669][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.204197][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.377651][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.424126][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.467973][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.679098][ T9578] loop8: detected capacity change from 0 to 512 [ 334.727949][ T9578] Quota error (device loop8): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 334.811899][ T9578] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 334.861156][ T9578] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1552: Failed to acquire dquot type 1 [ 334.924825][ T9578] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1552: bg 0: block 495: padding at end of block bitmap is not set [ 334.996420][ T9578] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 335.031165][ T9588] loop7: detected capacity change from 0 to 512 [ 335.057221][ T9578] EXT4-fs (loop8): 1 truncate cleaned up [ 335.060843][ T9588] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 335.107266][ T9578] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 335.134004][ T9588] EXT4-fs (loop7): 1 truncate cleaned up [ 335.150075][ T9588] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 335.166462][ T9578] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.204268][ T9594] loop1: detected capacity change from 0 to 16 [ 335.310285][ T9594] erofs: (device loop1): mounted with root inode @ nid 36. [ 335.362979][ T9578] Quota error (device loop8): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 335.498058][ T9578] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 335.864063][ T9578] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1552: Failed to acquire dquot type 1 [ 336.113605][ T8452] EXT4-fs (loop7): unmounting filesystem. [ 336.264427][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.273225][ T8581] EXT4-fs (loop8): unmounting filesystem. [ 336.280354][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.341414][ T9324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.434469][ T9611] loop7: detected capacity change from 0 to 1024 [ 336.460429][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.491795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.827223][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.842172][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.000332][ T4327] hfsplus: b-tree write err: -5, ino 25 [ 337.019625][ T4327] hfsplus: b-tree write err: -5, ino 4 [ 337.137605][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.159404][ T4327] hfsplus: b-tree write err: -5, ino 2 [ 337.470366][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.576433][ T9324] device veth0_vlan entered promiscuous mode [ 337.606103][ T9324] device veth1_vlan entered promiscuous mode [ 337.638821][ T9625] loop0: detected capacity change from 0 to 256 [ 337.741395][ T9324] device veth0_macvtap entered promiscuous mode [ 337.791800][ T9324] device veth1_macvtap entered promiscuous mode [ 337.854853][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.890703][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.944679][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 338.195854][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.667661][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.710133][ T9636] loop0: detected capacity change from 0 to 1024 [ 338.730759][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.751227][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.762069][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.801107][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.846594][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.874720][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.899865][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.958469][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.969234][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.987705][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.001068][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.034168][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.081264][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.095482][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.107925][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.139978][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.166584][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.188696][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.199279][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.221089][ T9324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.248911][ T9324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.258105][ T9324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.267163][ T9644] loop0: detected capacity change from 0 to 256 [ 339.273715][ T9324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.278803][ T9644] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.547939][ T7706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.589042][ T7706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.608587][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.651690][ T9655] loop1: detected capacity change from 0 to 1024 [ 339.690675][ T9655] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.702165][ T6995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.747211][ T6995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.797957][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.836260][ T9655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 339.870218][ T9655] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.087560][ T9669] input: syz1 as /devices/virtual/input/input19 [ 340.128943][ T9671] loop2: detected capacity change from 0 to 128 [ 340.148253][ T8371] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:13: lblock 0 mapped to illegal pblock 0 (length 3) [ 340.192023][ T9671] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 340.230459][ T8371] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 340.434945][ T8371] EXT4-fs (loop1): This should not happen!! Data will be lost [ 340.434945][ T8371] [ 340.447654][ T8371] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 112: padding at end of block bitmap is not set [ 340.466913][ T8371] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 340.479437][ T8371] EXT4-fs (loop1): This should not happen!! Data will be lost [ 340.479437][ T8371] [ 340.489186][ T8371] EXT4-fs (loop1): Total free blocks count 0 [ 340.509703][ T8371] EXT4-fs (loop1): Free/Dirty block details [ 340.532744][ T8371] EXT4-fs (loop1): free_blocks=0 [ 340.582979][ T8371] EXT4-fs (loop1): dirty_blocks=48 [ 340.588193][ T8371] EXT4-fs (loop1): Block reservation details [ 340.596055][ T9679] bpf: Bad value for 'mode' [ 341.529661][ T9698] loop1: detected capacity change from 0 to 128 [ 341.895961][ T9698] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 341.986097][ T9698] FAT-fs (loop1): Filesystem has been set read-only [ 343.229018][ T9711] binder: 9706:9711 ioctl c0306201 0 returned -14 [ 343.241730][ T9711] binder: 9706:9711 ioctl 4018620d 0 returned -22 [ 343.249332][ T9711] binder: 9706:9711 ioctl c0306201 0 returned -14 [ 343.420070][ T7897] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 343.510579][ C1] ------------[ cut here ]------------ [ 343.516617][ C1] WARNING: CPU: 1 PID: 9674 at net/mac80211/tx.c:4946 __ieee80211_beacon_get+0x1141/0x1520 [ 343.526739][ C1] Modules linked in: [ 343.530713][ C1] CPU: 1 PID: 9674 Comm: syz.2.1480 Not tainted syzkaller #0 [ 343.538124][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.548349][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 343.554763][ C1] Code: f7 4c 89 ef e8 00 21 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 2b 83 ce f7 0f 0b e9 61 f8 ff ff e8 1f 83 ce f7 <0f> 0b e9 85 fb ff ff e8 13 83 ce f7 48 c7 c7 20 02 fc 8d 4c 89 e6 [ 343.574499][ C1] RSP: 0018:ffffc900001e0a48 EFLAGS: 00010246 [ 343.580650][ C1] RAX: ffffffff89b39e81 RBX: dffffc0000000000 RCX: ffff888079a91e00 [ 343.588662][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.596722][ C1] RBP: 0000000000000000 R08: ffff888079a91e00 R09: 0000000000000003 [ 343.604769][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888067cc6228 [ 343.612825][ C1] R13: ffff888056b7b824 R14: ffff888067cc6760 R15: ffff888056b7b800 [ 343.620874][ C1] FS: 00007f4d6cca16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 343.629884][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.636510][ C1] CR2: 00007f888a1556b8 CR3: 000000005e659000 CR4: 00000000003506e0 [ 343.644575][ C1] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 000000000000000a [ 343.652626][ C1] DR3: 0000000000000800 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.660671][ C1] Call Trace: [ 343.663985][ C1] [ 343.666904][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 343.672541][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 343.678069][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 343.683834][ C1] __iterate_interfaces+0x225/0x4c0 [ 343.689109][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 343.695444][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 343.702728][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 343.709032][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 343.716144][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 343.721435][ C1] __hrtimer_run_queues+0x522/0xc90 [ 343.726683][ C1] ? hw_scan_work+0xf00/0xf00 [ 343.731457][ C1] ? hrtimer_interrupt+0x980/0x980 [ 343.736630][ C1] hrtimer_run_softirq+0x173/0x290 [ 343.741817][ C1] handle_softirqs+0x291/0x910 [ 343.746643][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 343.751577][ C1] ? do_softirq+0x210/0x210 [ 343.756124][ C1] ? hrtimer_interrupt+0x775/0x980 [ 343.761318][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 343.766561][ C1] __irq_exit_rcu+0x13b/0x230 [ 343.771318][ C1] ? irq_exit_rcu+0x20/0x20 [ 343.775890][ C1] irq_exit_rcu+0x5/0x20 [ 343.780212][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 343.785892][ C1] [ 343.788859][ C1] [ 343.791864][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.797905][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 343.803984][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 b5 cf 1f f7 e8 b0 99 4f f7 fb bf 01 00 00 00 25 ba ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 343.823680][ C1] RSP: 0018:ffffc90003c87960 EFLAGS: 00000286 [ 343.829842][ C1] RAX: 463b04d7679c2500 RBX: 0000000000000000 RCX: 463b04d7679c2500 [ 343.837869][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 343.845941][ C1] RBP: ffffc90003c87a10 R08: ffffffff8e2121af R09: 1ffffffff1c42435 [ 343.854000][ C1] R10: dffffc0000000000 R11: fffffbfff1c42436 R12: 0000000000000000 [ 343.862063][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000790f2c [ 343.870124][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 343.875903][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 343.881838][ C1] irqentry_exit+0x63/0x70 [ 343.886310][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 343.891870][ C1] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 343.897651][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 343.917339][ C1] RSP: 0018:ffffc90003c87ad8 EFLAGS: 00000206 [ 343.923508][ C1] RAX: 463b04d7679c2500 RBX: ffff888079a91e00 RCX: 463b04d7679c2500 [ 343.931569][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf42e0 [ 343.939601][ C1] RBP: 0000000000000000 R08: ffffc90003c876e7 R09: 1ffff92000790edc [ 343.947669][ C1] R10: dffffc0000000000 R11: fffff52000790edd R12: dffffc0000000000 [ 343.955726][ C1] R13: 0000000000000246 R14: ffffffff8cb2dbc0 R15: 00000000ffffffff [ 343.963826][ C1] __might_resched+0x9b/0x5f0 [ 343.968563][ C1] ? __might_sleep+0xd0/0xd0 [ 343.973295][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 343.978546][ C1] __might_fault+0x6d/0x120 [ 343.983154][ C1] do_recvmmsg+0x399/0x810 [ 343.987647][ C1] ? __sys_recvmmsg+0x290/0x290 [ 343.992631][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 343.998570][ C1] ? rcu_read_lock_sched_held+0x86/0x110 [ 344.004316][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 344.009407][ C1] ? do_recvmmsg+0x810/0x810 [ 344.014121][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 344.019381][ C1] do_syscall_64+0x4c/0xa0 [ 344.023905][ C1] ? clear_bhb_loop+0x60/0xb0 [ 344.028642][ C1] ? clear_bhb_loop+0x60/0xb0 [ 344.033443][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.039401][ C1] RIP: 0033:0x7f4d6bd9de59 [ 344.043930][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.063644][ C1] RSP: 002b:00007f4d6cca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 344.072158][ C1] RAX: ffffffffffffffda RBX: 00007f4d6c026090 RCX: 00007f4d6bd9de59 [ 344.080229][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 344.088258][ C1] RBP: 00007f4d6be33e6f R08: 0000000000000000 R09: 0000000000000000 [ 344.096315][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 344.104374][ C1] R13: 00007f4d6c026128 R14: 00007f4d6c026090 R15: 00007ffecc3fd2e8 [ 344.112512][ C1] [ 344.115606][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 344.122916][ C1] CPU: 1 PID: 9674 Comm: syz.2.1480 Not tainted syzkaller #0 [ 344.130325][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.140420][ C1] Call Trace: [ 344.143731][ C1] [ 344.146606][ C1] dump_stack_lvl+0x188/0x24e [ 344.151337][ C1] ? memcpy+0x3c/0x60 [ 344.155365][ C1] ? show_regs_print_info+0x12/0x12 [ 344.160632][ C1] ? load_image+0x410/0x410 [ 344.165196][ C1] panic+0x2d3/0x710 [ 344.169136][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 344.173699][ C1] __warn+0x2f8/0x4f0 [ 344.177725][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 344.183497][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 344.189267][ C1] report_bug+0x2ba/0x4f0 [ 344.193648][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 344.199417][ C1] handle_bug+0x3a/0x70 [ 344.203615][ C1] exc_invalid_op+0x16/0x40 [ 344.208166][ C1] asm_exc_invalid_op+0x16/0x20 [ 344.213072][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 344.219451][ C1] Code: f7 4c 89 ef e8 00 21 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 2b 83 ce f7 0f 0b e9 61 f8 ff ff e8 1f 83 ce f7 <0f> 0b e9 85 fb ff ff e8 13 83 ce f7 48 c7 c7 20 02 fc 8d 4c 89 e6 [ 344.239105][ C1] RSP: 0018:ffffc900001e0a48 EFLAGS: 00010246 [ 344.245223][ C1] RAX: ffffffff89b39e81 RBX: dffffc0000000000 RCX: ffff888079a91e00 [ 344.253233][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.261244][ C1] RBP: 0000000000000000 R08: ffff888079a91e00 R09: 0000000000000003 [ 344.269246][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888067cc6228 [ 344.277262][ C1] R13: ffff888056b7b824 R14: ffff888067cc6760 R15: ffff888056b7b800 [ 344.285297][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 344.291094][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 344.296867][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 344.302480][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 344.308008][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 344.313631][ C1] __iterate_interfaces+0x225/0x4c0 [ 344.318897][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 344.325216][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 344.332473][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 344.338946][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 344.346050][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 344.351308][ C1] __hrtimer_run_queues+0x522/0xc90 [ 344.356652][ C1] ? hw_scan_work+0xf00/0xf00 [ 344.361391][ C1] ? hrtimer_interrupt+0x980/0x980 [ 344.366566][ C1] hrtimer_run_softirq+0x173/0x290 [ 344.371734][ C1] handle_softirqs+0x291/0x910 [ 344.376548][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 344.381443][ C1] ? do_softirq+0x210/0x210 [ 344.385989][ C1] ? hrtimer_interrupt+0x775/0x980 [ 344.391182][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 344.396434][ C1] __irq_exit_rcu+0x13b/0x230 [ 344.401160][ C1] ? irq_exit_rcu+0x20/0x20 [ 344.405717][ C1] irq_exit_rcu+0x5/0x20 [ 344.410004][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 344.415684][ C1] [ 344.418657][ C1] [ 344.421629][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.427664][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 344.433623][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 b5 cf 1f f7 e8 b0 99 4f f7 fb bf 01 00 00 00 25 ba ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 344.453285][ C1] RSP: 0018:ffffc90003c87960 EFLAGS: 00000286 [ 344.459408][ C1] RAX: 463b04d7679c2500 RBX: 0000000000000000 RCX: 463b04d7679c2500 [ 344.467427][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 344.475441][ C1] RBP: ffffc90003c87a10 R08: ffffffff8e2121af R09: 1ffffffff1c42435 [ 344.483461][ C1] R10: dffffc0000000000 R11: fffffbfff1c42436 R12: 0000000000000000 [ 344.491483][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000790f2c [ 344.499518][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 344.505307][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 344.511176][ C1] irqentry_exit+0x63/0x70 [ 344.515636][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 344.521149][ C1] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 344.526911][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 344.546567][ C1] RSP: 0018:ffffc90003c87ad8 EFLAGS: 00000206 [ 344.552681][ C1] RAX: 463b04d7679c2500 RBX: ffff888079a91e00 RCX: 463b04d7679c2500 [ 344.560701][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf42e0 [ 344.568710][ C1] RBP: 0000000000000000 R08: ffffc90003c876e7 R09: 1ffff92000790edc [ 344.576721][ C1] R10: dffffc0000000000 R11: fffff52000790edd R12: dffffc0000000000 [ 344.584740][ C1] R13: 0000000000000246 R14: ffffffff8cb2dbc0 R15: 00000000ffffffff [ 344.592775][ C1] __might_resched+0x9b/0x5f0 [ 344.597553][ C1] ? __might_sleep+0xd0/0xd0 [ 344.602193][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 344.607278][ C1] __might_fault+0x6d/0x120 [ 344.611832][ C1] do_recvmmsg+0x399/0x810 [ 344.616309][ C1] ? __sys_recvmmsg+0x290/0x290 [ 344.621224][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 344.627162][ C1] ? rcu_read_lock_sched_held+0x86/0x110 [ 344.632900][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 344.638075][ C1] ? do_recvmmsg+0x810/0x810 [ 344.642727][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 344.647970][ C1] do_syscall_64+0x4c/0xa0 [ 344.652429][ C1] ? clear_bhb_loop+0x60/0xb0 [ 344.657145][ C1] ? clear_bhb_loop+0x60/0xb0 [ 344.661854][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.667774][ C1] RIP: 0033:0x7f4d6bd9de59 [ 344.672223][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.691868][ C1] RSP: 002b:00007f4d6cca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 344.700316][ C1] RAX: ffffffffffffffda RBX: 00007f4d6c026090 RCX: 00007f4d6bd9de59 [ 344.708311][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 344.716308][ C1] RBP: 00007f4d6be33e6f R08: 0000000000000000 R09: 0000000000000000 [ 344.724306][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 344.732297][ C1] R13: 00007f4d6c026128 R14: 00007f4d6c026090 R15: 00007ffecc3fd2e8 [ 344.740304][ C1] [ 344.743539][ C1] Kernel Offset: disabled [ 344.747921][ C1] Rebooting in 86400 seconds..