last executing test programs: 3m26.767626141s ago: executing program 4 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x40, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 3m26.491891666s ago: executing program 4 (id=32): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140), 0x8) 3m26.051853932s ago: executing program 4 (id=33): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$session_to_parent(0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m22.759920051s ago: executing program 4 (id=43): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000001c0), 0x1, 0x3fb, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x77f8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[], 0x0) pipe(&(0x7f0000000080)) 3m18.058635011s ago: executing program 4 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000bc0)=[@uexit={0x0, 0x18}, @code={0x1, 0x48, {"460f01ca410f01d10f070f22550f20d835200000000f22d8660ff548620f48dcb9b10000400f320fc71b440f20c03502000000440f22c0"}}, @uexit={0x0, 0x18, 0xffffffff}, @cpuid={0x2, 0x18, {0x13, 0xe0b5}}, @code={0x1, 0x62, {"2ef3470f32470fae1e2e66420f388197c3230000c4a361404e080766460f3880bf0a000000c4e3fd007f3d48b9800000c00f3235000100000f30410f01b82c1c0000c4e14f7d2d93700000c4630d42119e"}}, @cpuid={0x2, 0x18, {0x40, 0x6}}, @code={0x1, 0x55, {"4c0fc7ac0904000000f2f2deefdeffc46265b6cd660ff9f566baa10066ed0fc76bf748b80d000000000000000f23d80f21f835000000b00f23f8440f01c83e3ef30fa6d0"}}, @cpuid={0x2, 0x18, {0x1000, 0x3}}, @code={0x1, 0x5e, {"66baa00066edc4614175e966baf80cb8e0253589ef66bafc0cb000ee0fc731440f32b94f0a0000b845d40000ba000000000f303e36260f0766bad00466b8060066efc4a1fc10e8c4a36121db00"}}, @uexit={0x0, 0x18, 0x80000001}, @code={0x1, 0x5b, {"410f077c8f66ba2000ec64450f01c8c744240059000000c744240288070000ff1c24c4c2fd2390c9000000640fc75e07420fc7bb7427000066440f3a633517000000008fc8008e6b0000"}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x7fffffff}, @cpuid={0x2, 0x18, {0xaf, 0x4}}, @cpuid={0x2, 0x18, {0xffff, 0x6}}, @cpuid={0x2, 0x18, {0x0, 0x6}}, @cpuid={0x2, 0x18, {0x7ff, 0x8}}, @code={0x1, 0x6b, {"48b800400000000000000f23d80f21f835800000100f23f83e0f78eb66430f08b8010000000f01d966baf80cb8746a4683ef66bafc0c66ed410f01c467440ff4d066bad10466b8671d66ef470f01f80f20e035000020000f22e0"}}, @code={0x1, 0x53, {"c4437502afa2200000c2460f5fbe0000010066baa000ed650f01cb66b804000f00d00fc77696660f38803f450fc7b84ce384bc460500000000a2e7c7918b62f26f7c"}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0xfffffffffffffffe}], 0x3c6}) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b80)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m17.556080178s ago: executing program 4 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 3m17.180164413s ago: executing program 32 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2m58.097230886s ago: executing program 2 (id=135): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.871621203s ago: executing program 2 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904"], 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m53.848843108s ago: executing program 2 (id=152): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m53.430445304s ago: executing program 2 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m52.936193672s ago: executing program 2 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6a542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m52.244159782s ago: executing program 2 (id=158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m51.614466211s ago: executing program 33 (id=158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m23.641999695s ago: executing program 1 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0xd8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00'}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 2m22.152962757s ago: executing program 1 (id=224): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x20008050) close(0x3) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 2m21.428084818s ago: executing program 1 (id=228): unshare(0x22020400) syz_open_dev$swradio(&(0x7f00000003c0), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000380)={0x3, 0x20980900}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x4, @value=0x1b13}) 2m21.175941081s ago: executing program 1 (id=229): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./mnt\x00', 0x840, &(0x7f0000000340), 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m20.221540316s ago: executing program 1 (id=234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) 2m18.748243687s ago: executing program 1 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 2m18.309263494s ago: executing program 34 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1m49.084222686s ago: executing program 7 (id=325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 1m47.918992503s ago: executing program 7 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000001500)=ANY=[@ANYBLOB="23805308c71ebebc4431750f7be86835bb3bb4b158cd58eed26d37b7148a290cd165cc958ccf029a6f9a01e88b4170d7f0f7c62a97f1ae7dc8a8ed0cbfbe679b46da3f4d9228dfcffcec400f2b37c93011bb47f3d5297c80d22ee658dec8a0a4ad7fcf40fe", @ANYRES16=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="75b8fdeeab1654b4fb498e37c662c00e75c506cf39096270875d0a02537f71fccf9c1cafa241d2b464c41eafd3a8e7fcd5e6b56f795512c98d115410085aaf9e962f396d7daff254935d6755d3d089f164a6ae605f14be2c090000007e1700000000ce183beb3290da", @ANYBLOB="1d62ebb0ccb5e94dcdcb828c3970355b9987cd6e334ffd454ca2bf544100429d00dcac2b5ec12138c76a72d6cda85586456756cfeeebfff5318562932cc5ea38c4d76f9b48de0492f1be1b8371c6efb50e014f04f60a7cb78d3388ef325f13519f1a31f9c9d36e767716fd3eee1722b811f8ac99893bea886c4fa4947aeae5c7e075d58400146bce9d3eea0143e89892b92be440a44d16c809f06d40dd7761e7a04fa177d3b0407807aa78aff0c33b86c40b81ae7091495934b57c7ff4d692d19df7267ae058eb67e57259fa8b951eb46cfe735ef396279e0507b4ab6f733511c2f94bc0df878e9f90fca75fcdb0057b8e1b1014f5", @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYBLOB="c97dc49e9dc265089c0305c2ea392647a58bda23b92c53fe13505b6fc1586b7f25940b4134ff5b7914d559f6d7", @ANYBLOB="450cefe1e809e19f9aadbc89c99e54816863c56624fb0ef2405c59f85e2e0c02c9668d15a26c6cc47b44d8edc12ef5bf53d6a23c2c31b8ce390b611c97983fb71d3e41f4aa00b8ff770ef0398ec5adc27967a3a9c6d4e3615a80ae", @ANYBLOB="7c91a1f5ee5f6b491836cf8dcd550d1c6cbf4868d50472df80829d2c03b12302a05d55143ee732bf63bf5682b09999009c39894d87055315e37b896ca2bbbc6a4ece4af825ab0132f602c11bae881f0acbc7d21ea1ef89db12950cbd075060ed37940a2886e202c102874596838da198f956a10a1262311e78c8b2bc435f3f3ad8e4cf8ffda9bd099bc7c2a2c9e3847f9772df2c983d555ed1f516f238db0a417d57bb4e52cac216dc54f3115cc0fa170a184db813dffd95aca6bd55979b5869", @ANYRES32, @ANYRES16, @ANYRESHEX=0x0, @ANYRES16, @ANYRES8, @ANYRESDEC=r1], 0x45, 0x1538, &(0x7f0000002c80)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xfffffffc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a491, &(0x7f0000000580)={[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0xe, 0x510, &(0x7f0000000c00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m46.937394258s ago: executing program 7 (id=332): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="630b79637f72d29e147500000000", 0x0, 0x1000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m43.45620904s ago: executing program 7 (id=339): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100"], 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) 1m40.943700237s ago: executing program 7 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000480)=""/140, &(0x7f00000000c0)=0x8c) 1m39.34017723s ago: executing program 7 (id=353): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1m38.058298009s ago: executing program 35 (id=353): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 51.582101587s ago: executing program 6 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 49.683709745s ago: executing program 6 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x300, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 48.591548391s ago: executing program 6 (id=472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) listen(r0, 0x0) 48.227628657s ago: executing program 6 (id=476): socket(0x400000000010, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000002480)=ANY=[@ANYRES16, @ANYBLOB="322d6825fe8cf7050cedffff3c57c86c0b18fa14eb85515c2e26da314f1cae655aa13f05abe701b22a5d7801c560ffcaa7a9dd43edce1570072b0ef862679690e41a47e87f451affc318d2e01fa6e062186de79664ac21bb4786923b19c25c8a11b176a7a3ef1425b6d5e0c9ef15bd14e3c9d30fb24d50b512afb6ab04794571f1b53ae1a1d0f87c76239c9f6700ed8f08cbdb137cad2901209b2c77c46608d398435233cdf13d5d7a7f68384cc8956bda78a62e3872bcee78cfeee8c6051bbe2470c9646cfe9343a022b0618ce422f210c275b35df1507d54b51f86f9f329", @ANYRESDEC, @ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB="4315cc13ac94e9c3f0e2a8fafa5c9e4056273145be0c4331799b7e8df2ae24e73ba617968a52ecc15024f5995d84c2fde4920b700c711be5c87dcf179ee64e91619613a7f80dc5732438031843cf24457cbf5c844745d13eaa9248fba73776f8284069ffa18933269237037b352c1e236db691ab072d0fce5a9c7e6d9bb27ff13028d9d36f68d92a0a313b6d635419baeaebd57a394952846ccda1a950f90995fe13c4e506a4241a4ebb201ab59e3f9c86e074e13cef696364b07e94eaf2912bb4abfe", @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8890) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 46.795294068s ago: executing program 6 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 42.923085255s ago: executing program 3 (id=488): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getpid() r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x18, 0x50, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x1fd, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffff, 0x8}) 42.515734701s ago: executing program 3 (id=490): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802) write$binfmt_elf32(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x40, 0x30}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) 41.556067335s ago: executing program 6 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x35, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x28) 41.035025953s ago: executing program 36 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x35, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x28) 38.925948384s ago: executing program 3 (id=503): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) rt_sigaction(0x9, &(0x7f0000000440)={0x0, 0x6, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000540)) 36.995567843s ago: executing program 3 (id=506): socket(0x400000000010, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000002480)=ANY=[@ANYRES16, @ANYBLOB="322d6825fe8cf7050cedffff3c57c86c0b18fa14eb85515c2e26da314f1cae655aa13f05abe701b22a5d7801c560ffcaa7a9dd43edce1570072b0ef862679690e41a47e87f451affc318d2e01fa6e062186de79664ac21bb4786923b19c25c8a11b176a7a3ef1425b6d5e0c9ef15bd14e3c9d30fb24d50b512afb6ab04794571f1b53ae1a1d0f87c76239c9f6700ed8f08cbdb137cad2901209b2c77c46608d398435233cdf13d5d7a7f68384cc8956bda78a62e3872bcee78cfeee8c6051bbe2470c9646cfe9343a022b0618ce422f210c275b35df1507d54b51f86f9f329", @ANYRESDEC, @ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB="4315cc13ac94e9c3f0e2a8fafa5c9e4056273145be0c4331799b7e8df2ae24e73ba617968a52ecc15024f5995d84c2fde4920b700c711be5c87dcf179ee64e91619613a7f80dc5732438031843cf24457cbf5c844745d13eaa9248fba73776f8284069ffa18933269237037b352c1e236db691ab072d0fce5a9c7e6d9bb27ff13028d9d36f68d92a0a313b6d635419baeaebd57a394952846ccda1a950f90995fe13c4e506a4241a4ebb201ab59e3f9c86e074e13cef696364b07e94eaf2912bb4abfe", @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8890) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 36.081082496s ago: executing program 3 (id=509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000010000000000000000000000071107c000000000095000000000000005de07ebc2189fc614ffa0e70e9c3d788a756a5d246433fdf684e8da7a1d989fa54cd049f23af5f5d246c506498e98e2e763bf190f6931e737f1e01649e92af798ab3dc2dbcdb257a5d73f20fdb5bf90d89b8033a97a0de60ba2967b8c2d7e76cf28b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292100090509"], 0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa0179e08}) r3 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 28.762978114s ago: executing program 3 (id=525): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 27.135893909s ago: executing program 37 (id=525): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 24.617686506s ago: executing program 5 (id=535): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x12, 0x4, 0x0, &(0x7f0000000300)) 23.536484832s ago: executing program 5 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='%\n>.\x80\x16\xb7?](<\xe2\x9b\'\n\xd8\xa1\x97\xa7P\x05!\xd70\xc4^O\xb9\r\x10\x9c[\xe0\xc6\x10Z\xe9\xf8vMT\xf6l\x19\xc6A\x7f\xe8\xc9\xdf\a/H=9.\xe4\xdcb>9\xf0F\x189\xba\xd9*\x89\x8cm\xaaTS\xb6\xfb:o/u\x8cM\nz\x97b\xc3\x15\x92\x83\x16Y*+\xa6\x1e)\xba\xbb\xb5:\x8d\x8ff@\xf9\xc1\'s\xfd\xcd\xfb\xd9d\xf8\x91\xc3\xf8&@MB\xbb\n\'\xec\xbc\xaew\x87\xffM\x14\x03\\i\xb8\xd1$\xcf\xd6<\xeb\xea>\\\x15\x10\xff\xa4\xa6)\x05h;\x15\xd2\xcb*\xe4\xc2b\xc3\xacR\a\xd5n\xd4\xc5GKL\x9a\xe0\x99Rh\x7f\'\x8144RE\x96\x12\xa60R\x11\xd4\xa8\a$4\x90N\xa9\xd3\v? \x02J\x92\xcd\t\xe6X\x93\"\xd1`\xaeK\x9f\xc6\x00\r\xd5X\xbb\xf9\xd0M-!\xd2\xe0MR\xbd.\x1bj\x95\x84\xc9\xbd\'', 0x0) 22.371425259s ago: executing program 5 (id=538): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6164696e6963622c6e6f6164696e6963622c616e63686f723d30303030303030303030303030303030333737372c6c617374626c6f636b3d30303030303030303030303030303030303030322c6769643d69676e6f72652c756e64656c6574652c766f6c756d653d30303030303030303030303030303030303030372c6769643d666f726765742c6c617374626c6f636b3d30303030303030303030303030303030303030322c0094c55e5ddb9fd4a309e621c77211f58beb570ea8cf225a05cd2274a560ba8838d969e550471f3dacba597f3aa5ac2b78937d9564acc74d48f41d350100000000000000906693d988678b6c98dec9f8a81ff0a71ef4ff5cebfb9b861c3466326d921a699b1239c217298cb30d6cf879854c0776116ff5da50b5d6021459783502778a3e5bf09f458a1347335bf8dbb07562572b1a3af681ee5c3def998a898f47ff9d309858a44d9826f4e172"], 0xde, 0xc2e, &(0x7f0000000f40)="$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") socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000080)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@grpjquota}, {@nomblk_io_submit}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e06027c0c"], 0x9) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000a80)={0x8, 0x0, {0x0, @struct={0xff, 0x80000001}, 0x0, 0x3, 0x7897, 0x8, 0x6, 0x2, 0x70, @struct={0x0, 0x3}, 0x8, 0x32, [0x90e2, 0x146f, 0x5, 0x9, 0x4, 0x5]}, {0x2, @usage=0x8, 0x0, 0x246, 0xc, 0x400000, 0x4, 0xb1, 0x400, @usage, 0x1ff, 0x4, [0x5, 0x400, 0x8000, 0x80000000, 0x7, 0x7f]}, {0xa, @struct={0x3c}, 0x0, 0x8, 0x8000000000000000, 0x2, 0x800, 0x0, 0x400, @usage=0x4, 0x3ff, 0x6, [0x7, 0x1ff, 0x2, 0x8, 0xfe3]}, {0x8, 0x200, 0x1}}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000780)={{}, {@val={r2}, @actul_num={@val=0x2b, 0x9, 0x54}}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1}) sendmsg(0xffffffffffffffff, 0x0, 0x44004) 21.709186969s ago: executing program 5 (id=540): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070d000000000000020007000000", @ANYRES32=r2, @ANYBLOB="800087000a00020001"], 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000280)=0x8, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x40000) 21.210578126s ago: executing program 5 (id=543): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r0, 0x540a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000cc0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 20.651509765s ago: executing program 5 (id=544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 6.321937996s ago: executing program 0 (id=559): r0 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019100)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) 6.310784207s ago: executing program 8 (id=560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 4.822073379s ago: executing program 38 (id=544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 4.814459889s ago: executing program 0 (id=562): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.813713409s ago: executing program 8 (id=563): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000002c0)=0x7fff, 0x4) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) unshare(0x2000600) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) 4.781462929s ago: executing program 9 (id=496): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') pread64(r1, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) 3.970984311s ago: executing program 0 (id=564): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 3.591905577s ago: executing program 0 (id=565): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) 3.536724958s ago: executing program 9 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000400), 0x4, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x60}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.202898432s ago: executing program 8 (id=567): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="000000952ba30000000000000000", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.990322855s ago: executing program 0 (id=568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4010011) syz_open_dev$MSR(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 2.563760912s ago: executing program 8 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000040)={'dummy0\x00', @ifru_data=0x0}) 559.760771ms ago: executing program 8 (id=570): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 417.550514ms ago: executing program 9 (id=571): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r5}, 0x18) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 203.056077ms ago: executing program 0 (id=572): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept$inet6(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 19.68941ms ago: executing program 8 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) 0s ago: executing program 9 (id=574): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xc22841, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x100000000, 0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2008010, &(0x7f0000000000)=ANY=[], 0xfe, 0x6dc, &(0x7f00000008c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x39, 0x2a, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe9, 0x7}, {0xfff3}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240508c8}, 0x40004) kernel console output (not intermixed with test programs): ck 0 in block_group 0 [ 96.959956][ T4489] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.43: Invalid inode table block 0 in block_group 0 [ 96.990311][ T4514] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 97.050775][ T4515] loop2: detected capacity change from 0 to 2048 [ 97.109708][ T4515] loop2: p1 < > p3 [ 97.129674][ T4515] loop2: p3 size 134217728 extends beyond EOD, truncated [ 97.344988][ T4512] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.166875][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 98.583141][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.710453][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.876079][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.028639][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.462655][ T4563] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 99.734381][ T4258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.751089][ T4573] process 'syz.2.73' launched './file0' with NULL argv: empty string added [ 99.767016][ T4258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.779085][ T4258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.789574][ T4258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.798328][ T4258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.809443][ T4258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.385542][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.432099][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.866125][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 102.424634][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.945441][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 104.792001][ T4571] chnl_net:caif_netlink_parms(): no params data found [ 105.112969][ T4618] loop1: detected capacity change from 0 to 512 [ 105.339002][ T4618] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4551: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 105.889548][ T4618] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 106.024621][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 106.036085][ T4268] udevd[4268]: incorrect ext4 checksum on /dev/loop1 [ 106.078879][ T34] device hsr_slave_0 left promiscuous mode [ 106.116251][ T34] device hsr_slave_1 left promiscuous mode [ 106.130423][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.152593][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.172059][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.189837][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.208931][ T34] device bridge_slave_1 left promiscuous mode [ 106.241877][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.294427][ T34] device bridge_slave_0 left promiscuous mode [ 106.322252][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.411504][ T34] device veth1_macvtap left promiscuous mode [ 106.425441][ T34] device veth0_macvtap left promiscuous mode [ 106.438520][ T4639] input: syz1 as /devices/virtual/input/input5 [ 106.453802][ T34] device veth1_vlan left promiscuous mode [ 106.465634][ T34] device veth0_vlan left promiscuous mode [ 106.636104][ T4637] loop2: detected capacity change from 0 to 8192 [ 106.690819][ T4637] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.704817][ T4637] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 106.714134][ T4637] REISERFS (device loop2): using ordered data mode [ 106.721274][ T4637] reiserfs: using flush barriers [ 106.734808][ T4637] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.755510][ T4637] REISERFS (device loop2): checking transaction log (loop2) [ 107.085156][ T4637] REISERFS (device loop2): Using tea hash to sort names [ 107.106432][ T4637] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 108.104709][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 108.329363][ T34] team0 (unregistering): Port device team_slave_1 removed [ 109.285961][ T34] team0 (unregistering): Port device team_slave_0 removed [ 109.355554][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.417594][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.173023][ T34] bond0 (unregistering): Released all slaves [ 110.324751][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 110.398557][ T4678] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 110.414199][ T4679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 110.452956][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.471731][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.510422][ T4571] device bridge_slave_0 entered promiscuous mode [ 110.540348][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.578245][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.607929][ T4571] device bridge_slave_1 entered promiscuous mode [ 110.713751][ T4571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.739885][ T4571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.899901][ T4571] team0: Port device team_slave_0 added [ 110.920732][ T4571] team0: Port device team_slave_1 added [ 111.071804][ T4571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.110098][ T4571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.225177][ T4571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.293132][ T4571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.310610][ T4571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.392979][ T4571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.407508][ T4571] device hsr_slave_0 entered promiscuous mode [ 112.478794][ T4711] loop3: detected capacity change from 0 to 2048 [ 112.495991][ T4571] device hsr_slave_1 entered promiscuous mode [ 112.516122][ T4571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.565997][ T4571] Cannot create hsr debugfs directory [ 112.645505][ T4726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 112.660910][ T4711] loop3: p1 < > p3 [ 112.695880][ T4711] loop3: p3 size 134217728 extends beyond EOD, truncated [ 113.661934][ T4242] udevd[4242]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 113.662623][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 114.171074][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 114.203348][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 114.676448][ T4571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.894048][ T4571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.773408][ T4571] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.855300][ T4571] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.251204][ T4771] loop1: detected capacity change from 0 to 1024 [ 116.270613][ T4571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.301780][ T4771] EXT4-fs: Ignoring removed nobh option [ 116.328106][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.371290][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.379154][ T4771] EXT4-fs: Ignoring removed bh option [ 116.397910][ T4571] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.401592][ T4771] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.455136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.484410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.510537][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.514206][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.526710][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.619761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.629877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.639316][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.646614][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.657112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.692196][ T4771] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.758063][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.780666][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.822574][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.840169][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.884949][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.913439][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 116.927405][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.968527][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.020141][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.052786][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.100107][ T4571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.165943][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.194158][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.451029][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.572472][ T4810] overlayfs: failed to clone upperpath [ 118.946207][ T4826] binder: 4825:4826 ioctl c0306201 200000000080 returned -14 [ 119.193078][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.215447][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.246894][ T4571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.690965][ T4300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.914845][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 119.937861][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.979883][ T4300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.014062][ T4300] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.035275][ T4857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.144'. [ 120.223319][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.232094][ T4300] usb 3-1: Product: syz [ 120.236476][ T4300] usb 3-1: Manufacturer: syz [ 120.241111][ T4300] usb 3-1: SerialNumber: syz [ 120.568626][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.590450][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.668776][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.690919][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.724269][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.751012][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.791090][ T4571] device veth0_vlan entered promiscuous mode [ 120.853127][ T4571] device veth1_vlan entered promiscuous mode [ 120.958358][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.002284][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.038234][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.070817][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.268242][ T7] usb 3-1: USB disconnect, device number 2 [ 122.336489][ T4571] device veth0_macvtap entered promiscuous mode [ 122.364236][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.467674][ T4883] device bond_slave_0 entered promiscuous mode [ 122.474566][ T4883] device bond_slave_1 entered promiscuous mode [ 122.570750][ T4883] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.613895][ T4883] team0: Failed to send port change of device macvlan2 via netlink (err -105) [ 122.644798][ T4883] team0: Failed to send options change via netlink (err -105) [ 122.652291][ T4883] team0: Port device macvlan2 added [ 122.777430][ T4571] device veth1_macvtap entered promiscuous mode [ 122.916063][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.964572][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.005365][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.067104][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.106417][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.158334][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.192458][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.231315][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.325485][ T4571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.356268][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.399247][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.460130][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.475809][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.491414][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.504574][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.520262][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.531275][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.548792][ T4571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.560976][ T4571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.617684][ T4571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.759357][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.800756][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.832694][ T4571] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.886579][ T4571] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.932741][ T4571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.974178][ T4571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.306603][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.329709][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.419298][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.456331][ T4591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.477365][ T4591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.515182][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.647028][ T26] audit: type=1800 audit(1748881306.786:4): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.157" name="bus" dev="ramfs" ino=36357 res=0 errno=0 [ 125.074660][ T4913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.161'. [ 125.088735][ T4756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.091739][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 125.251389][ T4756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.591533][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.647647][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.660347][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.673226][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.692360][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 125.967765][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.317295][ T4756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.581087][ T4756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.866435][ T4949] netlink: set zone limit has 8 unknown bytes [ 127.918629][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 128.024864][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 128.547447][ T4930] chnl_net:caif_netlink_parms(): no params data found [ 130.240050][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 132.275885][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 133.606040][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.612396][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.613833][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 134.886117][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.893262][ T4930] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.983283][ T4930] device bridge_slave_0 entered promiscuous mode [ 135.140151][ T4930] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.152098][ T4930] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.174370][ T4930] device bridge_slave_1 entered promiscuous mode [ 135.531247][ T4930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.556688][ T4930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.492483][ T4930] team0: Port device team_slave_0 added [ 136.546370][ T4930] team0: Port device team_slave_1 added [ 136.849316][ T4930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.870487][ T4930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.954653][ T4930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.141161][ T4930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.156091][ T4930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.464554][ T4930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.861763][ T4930] device hsr_slave_0 entered promiscuous mode [ 138.880608][ T4930] device hsr_slave_1 entered promiscuous mode [ 138.900675][ T4930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.918860][ T4930] Cannot create hsr debugfs directory [ 138.994900][ T5032] syz.0.188 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 139.669752][ T4756] device hsr_slave_0 left promiscuous mode [ 139.691667][ T4756] device hsr_slave_1 left promiscuous mode [ 139.729125][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.748303][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.766752][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.784920][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.792907][ T4756] device bridge_slave_1 left promiscuous mode [ 139.816830][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.836045][ T4756] device bridge_slave_0 left promiscuous mode [ 139.852507][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.981003][ T4756] device veth1_macvtap left promiscuous mode [ 139.990519][ T4756] device veth0_macvtap left promiscuous mode [ 140.006191][ T4756] device veth1_vlan left promiscuous mode [ 140.012163][ T4756] device veth0_vlan left promiscuous mode [ 142.106072][ T4756] team0 (unregistering): Port device team_slave_1 removed [ 142.165544][ T4756] team0 (unregistering): Port device team_slave_0 removed [ 142.241593][ T4756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.393934][ T4756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.908590][ T4756] bond0 (unregistering): Released all slaves [ 144.264235][ T4930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.318634][ T4930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.347316][ T5098] overlayfs: statfs failed on './file0' [ 144.381951][ T4930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.475081][ T4930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 145.561337][ T4930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.607795][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.671208][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.714097][ T4930] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.743958][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.781305][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.801028][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.808205][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.850857][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.902912][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.956898][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.980721][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.988856][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.034397][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.070941][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.107411][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.151700][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.180948][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.218525][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.241282][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.261416][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.281524][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.298743][ T4930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.317418][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.331514][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.350381][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.746370][ T5159] loop3: detected capacity change from 0 to 256 [ 147.821492][ T5162] loop1: detected capacity change from 0 to 16 [ 148.054641][ T5162] erofs: (device loop1): mounted with root inode @ nid 36. [ 150.442544][ T5167] infiniband syz1: set active [ 150.447843][ T5167] infiniband syz1: added syz_tun [ 150.574883][ T5167] infiniband syz1: Couldn't open port 1 [ 150.623329][ T5167] RDS/IB: syz1: added [ 150.628032][ T5167] smc: adding ib device syz1 with port count 1 [ 150.634558][ T5167] smc: ib device syz1 port 1 has pnetid [ 150.862891][ T4267] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 150.882661][ T5162] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 150.894905][ T26] audit: type=1800 audit(1748881333.036:5): pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.219" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 150.901898][ T5162] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 150.928695][ T5162] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 150.940241][ T5162] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 150.951368][ T5162] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 151.346224][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.354405][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.379751][ T4930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.939874][ T5196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.108741][ T5204] netlink: 9 bytes leftover after parsing attributes in process `syz.1.224'. [ 154.179622][ T5204] device gretap0 entered promiscuous mode [ 154.243742][ T5207] netlink: 5 bytes leftover after parsing attributes in process `syz.1.224'. [ 154.277188][ T5207] 0ªî{X¹¦: renamed from gretap0 [ 154.315999][ T5207] device 30ªî{X¹¦ left promiscuous mode [ 154.385181][ T5207] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 154.428927][ T5204] Zero length message leads to an empty skb [ 154.635392][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.667299][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.736820][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.766639][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.808547][ T4930] device veth0_vlan entered promiscuous mode [ 154.818284][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.842761][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.879048][ T4930] device veth1_vlan entered promiscuous mode [ 155.022214][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.051975][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.096269][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.104353][ T5218] loop3: detected capacity change from 0 to 8192 [ 155.160326][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.168812][ T5224] loop1: detected capacity change from 0 to 128 [ 155.201465][ T4930] device veth0_macvtap entered promiscuous mode [ 155.227337][ T5226] mmap: syz.5.231 (5226) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.250236][ T4930] device veth1_macvtap entered promiscuous mode [ 155.315204][ T5224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.335413][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.346037][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.358077][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.364868][ T5224] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.368780][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.388734][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.400556][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.410522][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.421045][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.432673][ T4930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.444165][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.458502][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.489155][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.523168][ T5226] loop5: detected capacity change from 0 to 256 [ 155.540987][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.595290][ T5226] exfat: Deprecated parameter 'namecase' [ 155.603850][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.673035][ T5224] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 4: comm syz.1.229: lblock 0 mapped to illegal pblock 4 (length 1) [ 155.682728][ T5226] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 155.705594][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.735205][ T4930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.780082][ T4930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.863477][ T4930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.944191][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.959259][ T4260] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1) [ 155.985537][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.993811][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.067069][ T4260] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 156.086362][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.119708][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.155942][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.184758][ T4454] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 156.230485][ T4454] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 156.272992][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 156.367052][ T4930] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.376143][ T4930] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.385148][ T4930] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.393890][ T4930] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.407468][ T5247] binder_alloc: 5246: binder_alloc_buf, no vma [ 157.509049][ T4359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.715305][ T4359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.771049][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.814570][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.831019][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.865670][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.900466][ T4359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.938970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.959213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.049942][ T4359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.866148][ T4258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.880246][ T4258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.889562][ T4258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.901254][ T4258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.915101][ T4258] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.934631][ T4258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.017966][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 161.991042][ T5277] chnl_net:caif_netlink_parms(): no params data found [ 163.064664][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 163.247250][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.265240][ T5277] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.290486][ T5277] device bridge_slave_0 entered promiscuous mode [ 164.263371][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.474815][ T5277] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.484740][ T5343] loop6: detected capacity change from 0 to 8 [ 165.009376][ T5277] device bridge_slave_1 entered promiscuous mode [ 165.333149][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 165.561943][ T4359] device hsr_slave_0 left promiscuous mode [ 165.571967][ T5343] SQUASHFS error: lzo decompression failed, data probably corrupt [ 165.590106][ T4359] device hsr_slave_1 left promiscuous mode [ 165.597727][ T5343] SQUASHFS error: Failed to read block 0x91: -5 [ 165.618902][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.626610][ T5343] SQUASHFS error: Unable to read metadata cache entry [8f] [ 165.634036][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.649222][ T5343] SQUASHFS error: Unable to read inode 0x11f [ 165.666678][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.675329][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.690417][ T4359] device bridge_slave_1 left promiscuous mode [ 165.729050][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.762156][ T4359] device bridge_slave_0 left promiscuous mode [ 165.789324][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.796996][ T4295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 165.931732][ T4359] device veth1_macvtap left promiscuous mode [ 165.941629][ T4359] device veth0_macvtap left promiscuous mode [ 165.966014][ T4359] device veth1_vlan left promiscuous mode [ 165.971903][ T4359] device veth0_vlan left promiscuous mode [ 165.984738][ T4295] usb 4-1: Using ep0 maxpacket: 16 [ 165.995398][ T4295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.016221][ T4295] usb 4-1: config 0 has no interfaces? [ 166.036658][ T4295] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.047027][ T5361] overlayfs: failed to clone upperpath [ 166.055426][ T5364] capability: warning: `syz.5.263' uses deprecated v2 capabilities in a way that may be insecure [ 166.070213][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.102942][ T4295] usb 4-1: config 0 descriptor?? [ 166.400436][ T5350] loop3: detected capacity change from 0 to 1024 [ 166.428025][ T5350] hfsplus: unable to parse mount options [ 167.393370][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 167.453977][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 167.504231][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 167.554237][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.607097][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.176771][ T4359] bond0 (unregistering): Released all slaves [ 168.269372][ T5383] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 168.320937][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 168.335977][ T5408] netlink: 'syz.5.267': attribute type 10 has an invalid length. [ 168.353105][ T7] usb 4-1: USB disconnect, device number 2 [ 168.404353][ T5408] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.442361][ T5277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.508222][ T5277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.830022][ T5277] team0: Port device team_slave_0 added [ 168.974853][ T5423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 169.054867][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 169.084352][ T5417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 169.111320][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 169.167123][ T5414] ceph: No mds server is up or the cluster is laggy [ 169.192994][ T5277] team0: Port device team_slave_1 added [ 169.229178][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 169.321059][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 169.857335][ T5277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.864632][ T5277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.065400][ T5277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.125077][ T5277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.132458][ T5277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.193404][ T5277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.598160][ T5277] device hsr_slave_0 entered promiscuous mode [ 171.635660][ T5277] device hsr_slave_1 entered promiscuous mode [ 171.694704][ T5277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.702336][ T5277] Cannot create hsr debugfs directory [ 172.167936][ T5470] loop5: detected capacity change from 0 to 1024 [ 173.116369][ T5470] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 173.226490][ T26] audit: type=1800 audit(1748881355.366:6): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.281" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 174.240526][ T5277] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.255569][ T4571] EXT4-fs (loop5): unmounting filesystem. [ 174.360824][ T5277] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.444364][ T5277] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.494134][ T5277] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.593269][ T4298] libceph: connect (1)[c::]:6789 error -101 [ 174.601236][ T4298] libceph: mon0 (1)[c::]:6789 connect error [ 174.738551][ T5502] ceph: No mds server is up or the cluster is laggy [ 174.934352][ T5277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.006593][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.046106][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.088776][ T5277] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.128476][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.146270][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.245861][ T5379] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.253106][ T5379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.308452][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.527132][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.636185][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.680747][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.687983][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.298734][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.315653][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.378732][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.398668][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.417881][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.443093][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.459148][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.482987][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.498304][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.503892][ T5523] loop5: detected capacity change from 0 to 1024 [ 176.517194][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.526274][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.573888][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.755981][ T5530] Bluetooth: MGMT ver 1.22 [ 178.558647][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.577713][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.614012][ T5277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.047069][ T5566] netlink: 44 bytes leftover after parsing attributes in process `syz.5.301'. [ 179.104441][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.112389][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.359012][ T5573] loop6: detected capacity change from 0 to 512 [ 179.480896][ T5573] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 179.542979][ T5573] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.848836][ T4930] EXT4-fs (loop6): unmounting filesystem. [ 180.712933][ T5395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.957773][ T5395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.023834][ T5593] loop6: detected capacity change from 0 to 8192 [ 181.042092][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.072892][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.159562][ T5395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.247459][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.288144][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.335437][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.386354][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.483719][ T5395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.535424][ T5277] device veth0_vlan entered promiscuous mode [ 181.573533][ T5277] device veth1_vlan entered promiscuous mode [ 181.727713][ T5277] device veth0_macvtap entered promiscuous mode [ 181.785187][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.807709][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.845640][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.895145][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.931046][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.961358][ T5277] device veth1_macvtap entered promiscuous mode [ 182.142487][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.161285][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.192701][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.260557][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.284191][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.296316][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.315807][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.323802][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.332604][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 182.340152][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.431320][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.871572][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.104563][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.155832][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.239271][ T5277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.281196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.291508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.323874][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.338981][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.366810][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.383458][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.404864][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.432120][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.462911][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.483995][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.511665][ T5277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.538155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.571150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.594388][ T5277] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.607359][ T5277] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.649055][ T5277] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.679561][ T5277] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.998325][ T5648] loop5: detected capacity change from 0 to 128 [ 184.048592][ T5648] FAT-fs (loop5): Unrecognized mount option "utf0" or missing value [ 184.226668][ T5389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.265013][ T5389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.320935][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.424973][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 184.677762][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.714539][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.848368][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.884286][ T26] audit: type=1326 audit(1748881367.006:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 185.349810][ T26] audit: type=1326 audit(1748881367.486:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 185.657014][ T26] audit: type=1326 audit(1748881367.486:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 185.780754][ T26] audit: type=1326 audit(1748881367.486:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 185.885705][ T26] audit: type=1326 audit(1748881367.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 185.969945][ T26] audit: type=1326 audit(1748881367.486:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 186.132161][ T26] audit: type=1326 audit(1748881367.486:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 186.154920][ T26] audit: type=1326 audit(1748881367.486:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 186.259652][ T5685] loop7: detected capacity change from 0 to 8 [ 186.276069][ T5685] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 186.341121][ T5685] cramfs: Error -5 while decompressing! [ 186.347139][ T5685] cramfs: ffffffff96b4c568(26)->ffff8880488f0000(4096) [ 186.354060][ T5685] cramfs: Error -3 while decompressing! [ 186.359721][ T5685] cramfs: ffffffff96b4c582(26)->ffff8880488f1000(4096) [ 186.366747][ T5685] cramfs: Error -3 while decompressing! [ 186.372314][ T5685] cramfs: ffffffff96b4c59c(16)->ffff8880488f2000(4096) [ 186.379324][ T5685] cramfs: Error -5 while decompressing! [ 186.384925][ T5685] cramfs: ffffffff96b4c568(26)->ffff8880488f0000(4096) [ 186.402339][ T26] audit: type=1326 audit(1748881367.486:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 186.996003][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 187.024310][ T26] audit: type=1326 audit(1748881367.486:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.6.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92b78e969 code=0x7fc00000 [ 187.050179][ T4268] udevd[4268]: incorrect cramfs checksum on /dev/loop7 [ 188.198596][ T5624] chnl_net:caif_netlink_parms(): no params data found [ 188.488350][ T5706] loop7: detected capacity change from 0 to 256 [ 188.726794][ T5712] loop6: detected capacity change from 0 to 128 [ 188.745543][ T5712] FAT-fs (loop6): Unrecognized mount option "utf0" or missing value [ 188.807824][ T5703] loop7: detected capacity change from 0 to 512 [ 189.064862][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 189.525072][ T5724] ax25_connect(): syz.6.331 uses autobind, please contact jreuter@yaina.de [ 190.141064][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.165302][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.247103][ T5624] device bridge_slave_0 entered promiscuous mode [ 190.289444][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.335170][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.381702][ T5624] device bridge_slave_1 entered promiscuous mode [ 190.430680][ T5395] device hsr_slave_0 left promiscuous mode [ 190.472806][ T5395] device hsr_slave_1 left promiscuous mode [ 190.497101][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.522081][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.551937][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.584984][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.592929][ T5395] device bridge_slave_1 left promiscuous mode [ 190.609782][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.667025][ T5395] device bridge_slave_0 left promiscuous mode [ 190.673316][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.921157][ T5395] device veth1_macvtap left promiscuous mode [ 190.928566][ T5395] device veth0_macvtap left promiscuous mode [ 190.954310][ T5395] device veth1_vlan left promiscuous mode [ 190.980835][ T5395] device veth0_vlan left promiscuous mode [ 191.144765][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 192.532822][ T5727] loop6: detected capacity change from 0 to 40427 [ 192.680804][ T5727] F2FS-fs (loop6): build fault injection attr: rate: 693, type: 0x3ffff [ 193.095728][ T5727] F2FS-fs (loop6): invalid crc value [ 193.384635][ T5727] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 193.713334][ T4296] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 193.931895][ T4296] usb 8-1: Using ep0 maxpacket: 16 [ 193.939510][ T4296] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.962507][ T4296] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.981992][ T4296] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 194.002696][ T4296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.065701][ T4296] usb 8-1: config 0 descriptor?? [ 194.268492][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288274][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.336946][ T5759] loop7: detected capacity change from 0 to 256 [ 194.428325][ T5759] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 194.440498][ T5769] loop5: detected capacity change from 0 to 1024 [ 194.598489][ T4296] usb 8-1: USB disconnect, device number 2 [ 194.985663][ T7] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 195.005038][ T5395] team0 (unregistering): Port device team_slave_1 removed [ 195.108267][ T5395] team0 (unregistering): Port device team_slave_0 removed [ 195.166629][ T5395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.192862][ T7] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 195.210345][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 195.235802][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 195.253869][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 195.279206][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 195.313070][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 195.340229][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 195.355528][ T5395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.382221][ T7] usb 6-1: language id specifier not provided by device, defaulting to English [ 195.427144][ T7] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 195.463751][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.479289][ T7] usb 6-1: Manufacturer: 撛摥攀瑮s [ 195.502639][ T7] usb 6-1: config 0 descriptor?? [ 195.522985][ T7] hub 6-1:0.0: bad descriptor, ignoring hub [ 195.536582][ T7] hub: probe of 6-1:0.0 failed with error -5 [ 195.589360][ T7] input: 撛摥攀瑮s as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 195.745708][ T7] usb 6-1: USB disconnect, device number 2 [ 196.250557][ T5395] bond0 (unregistering): Released all slaves [ 196.344767][ T4258] Bluetooth: hci2: command 0x0406 tx timeout [ 196.396402][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 196.540296][ T5780] netlink: 'syz.6.347': attribute type 5 has an invalid length. [ 196.648747][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.713851][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 196.981541][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.803693][ T5624] team0: Port device team_slave_0 added [ 197.885783][ T5624] team0: Port device team_slave_1 added [ 198.009832][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.021030][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.050944][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.147051][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.154150][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.238848][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.611591][ T5806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.357'. [ 198.983995][ T5810] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 199.481708][ T5624] device hsr_slave_0 entered promiscuous mode [ 199.808371][ T5624] device hsr_slave_1 entered promiscuous mode [ 200.008085][ T5624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.125933][ T5624] Cannot create hsr debugfs directory [ 200.390102][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.400218][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.410167][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.419530][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.427556][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 200.444289][ T4264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.534927][ T5827] netlink: 'syz.0.361': attribute type 5 has an invalid length. [ 200.711027][ T5395] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.930636][ T5395] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.992642][ T5850] loop6: detected capacity change from 0 to 1024 [ 201.080872][ T5850] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 201.325710][ T5395] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.395229][ T5857] sctp: [Deprecated]: syz.0.365 (pid 5857) Use of int in max_burst socket option deprecated. [ 201.395229][ T5857] Use struct sctp_assoc_value instead [ 201.449756][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.066572][ T22] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.123857][ T5850] loop6: detected capacity change from 0 to 1024 [ 202.145269][ T5850] EXT4-fs: Ignoring removed i_version option [ 202.223567][ T5860] overlayfs: failed to clone upperpath [ 202.229271][ T5850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.236553][ T5850] EXT4-fs: Ignoring removed oldalloc option [ 202.252469][ T5850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.267590][ T5395] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.332849][ T5850] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.445750][ T5850] hid-generic 0000:0000:0000.0001: pid 5850 passed too short report [ 202.575117][ T4264] Bluetooth: hci3: command 0x0409 tx timeout [ 202.707710][ T5858] fido_id[5858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.543547][ T4930] EXT4-fs (loop6): unmounting filesystem. [ 204.007995][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 204.242315][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.308722][ T5883] bridge0: port 3(vxlan0) entered blocking state [ 204.331282][ T5883] bridge0: port 3(vxlan0) entered disabled state [ 204.357649][ T5883] device vxlan0 entered promiscuous mode [ 204.382032][ T5884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.370'. [ 204.584761][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 204.946276][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.811383][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.231550][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.252208][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.578075][ T5828] device bridge_slave_0 entered promiscuous mode [ 206.674646][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 207.101624][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.255535][ T5917] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 207.321387][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.332887][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.355768][ T5828] device bridge_slave_1 entered promiscuous mode [ 207.551779][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.610634][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.710403][ T5926] netlink: 'syz.6.379': attribute type 10 has an invalid length. [ 207.779777][ T5926] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.050713][ T5828] team0: Port device team_slave_0 added [ 208.183603][ T5828] team0: Port device team_slave_1 added [ 208.385390][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.400389][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.466695][ T5938] loop6: detected capacity change from 0 to 2048 [ 208.480984][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.516484][ T5938] loop6: p1 < > p3 [ 208.531686][ T5938] loop6: p3 size 134217728 extends beyond EOD, truncated [ 208.637413][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.658757][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.676742][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.744634][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 208.854627][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.099655][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.113136][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.200181][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.291249][ T5828] device hsr_slave_0 entered promiscuous mode [ 209.315553][ T5828] device hsr_slave_1 entered promiscuous mode [ 209.355506][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.363139][ T5828] Cannot create hsr debugfs directory [ 209.608969][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.620336][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.638968][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.646201][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.792647][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.974934][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.106011][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.113250][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.385943][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.395478][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.404593][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.413634][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.485721][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.385'. [ 210.509040][ T5955] device bond0 entered promiscuous mode [ 210.531444][ T5955] device bond_slave_0 entered promiscuous mode [ 210.537978][ T5955] device bond_slave_1 entered promiscuous mode [ 210.544351][ T5955] device wlan1 entered promiscuous mode [ 210.554925][ T5955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.564125][ T5955] device bond0 left promiscuous mode [ 210.584409][ T5955] device bond_slave_0 left promiscuous mode [ 210.590789][ T5955] device bond_slave_1 left promiscuous mode [ 210.597254][ T5955] device wlan1 left promiscuous mode [ 210.839548][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.861460][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.871935][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.881515][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.902397][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.915519][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.197842][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.384002][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.660481][ T5970] loop5: detected capacity change from 0 to 1024 [ 211.710104][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.797516][ T5970] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 211.870295][ T5975] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 211.873904][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 211.873921][ T26] audit: type=1800 audit(1748881394.006:76): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.388" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 211.959957][ T5975] device dummy0 entered promiscuous mode [ 211.982571][ T5975] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 212.010003][ T4571] EXT4-fs (loop5): unmounting filesystem. [ 212.023809][ T5395] device hsr_slave_0 left promiscuous mode [ 212.092892][ T5395] device hsr_slave_1 left promiscuous mode [ 212.105270][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.123276][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.154119][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.183302][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.209044][ T5395] device bridge_slave_1 left promiscuous mode [ 212.224849][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.262829][ T5395] device bridge_slave_0 left promiscuous mode [ 212.273055][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.310762][ T5395] device veth1_macvtap left promiscuous mode [ 212.321965][ T5395] device veth0_macvtap left promiscuous mode [ 212.329472][ T5395] device veth1_vlan left promiscuous mode [ 212.336256][ T5395] device veth0_vlan left promiscuous mode [ 214.722070][ T5395] team0 (unregistering): Port device team_slave_1 removed [ 214.796062][ T5395] team0 (unregistering): Port device team_slave_0 removed [ 214.848103][ T5395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.908202][ T5395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.529146][ T5395] bond0 (unregistering): Released all slaves [ 215.665250][ T5987] netlink: 'syz.5.391': attribute type 16 has an invalid length. [ 215.673136][ T5987] netlink: 'syz.5.391': attribute type 17 has an invalid length. [ 215.703755][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.711668][ T5987] bridge0: port 2(bridge_slave_1) entered listening state [ 215.719441][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.728000][ T5987] bridge0: port 1(bridge_slave_0) entered listening state [ 215.768518][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.776362][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.783864][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.796804][ T6013] ax25_connect(): syz.6.399 uses autobind, please contact jreuter@yaina.de [ 215.819196][ T5987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.853208][ T6003] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 217.224938][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.233420][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.378406][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.497966][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.545388][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.607079][ T5828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 217.715330][ T5828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 217.747137][ T5624] device veth0_vlan entered promiscuous mode [ 217.779653][ T5828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.057220][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.114188][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.255245][ T5828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 218.462197][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.485747][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.535297][ T5624] device veth1_vlan entered promiscuous mode [ 218.717993][ T5624] device veth0_macvtap entered promiscuous mode [ 218.740374][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.766295][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.801267][ T26] audit: type=1326 audit(1748881400.936:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 218.831408][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.871378][ T5624] device veth1_macvtap entered promiscuous mode [ 218.943812][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.955509][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.966211][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.977200][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.987632][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.001924][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.014040][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.027855][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.039366][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.051640][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.078515][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.095399][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.107107][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.117442][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.128428][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.138917][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.150746][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.163083][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.176354][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.190123][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.213790][ T5624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.224074][ T5624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.233883][ T5624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.246037][ T5624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.260326][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.269251][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.280359][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.307838][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.326139][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.345225][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.352366][ T5405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.379491][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.406408][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.412363][ T26] audit: type=1326 audit(1748881401.536:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.426916][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.446034][ T26] audit: type=1326 audit(1748881401.536:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.450665][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.475671][ T5405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.486490][ T26] audit: type=1326 audit(1748881401.536:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.509213][ T26] audit: type=1326 audit(1748881401.536:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.553484][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.561683][ T26] audit: type=1326 audit(1748881401.536:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.568005][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.592293][ T26] audit: type=1326 audit(1748881401.536:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.639441][ T26] audit: type=1326 audit(1748881401.536:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.670844][ T26] audit: type=1326 audit(1748881401.536:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.703074][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.720341][ T26] audit: type=1326 audit(1748881401.546:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.5.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3b38e969 code=0x7fc00000 [ 219.727707][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.796454][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.826580][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.857541][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.943196][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.954389][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.117539][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.132091][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.211410][ T6071] loop6: detected capacity change from 0 to 8 [ 220.225032][ T6071] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 220.288665][ T6071] cramfs: Error -5 while decompressing! [ 220.294331][ T6071] cramfs: ffffffff96b50568(26)->ffff888070eb5000(4096) [ 220.301540][ T6071] cramfs: Error -3 while decompressing! [ 220.307183][ T6071] cramfs: ffffffff96b50582(26)->ffff888070eb6000(4096) [ 220.314217][ T6071] cramfs: Error -3 while decompressing! [ 220.319909][ T6071] cramfs: ffffffff96b5059c(16)->ffff888070eb7000(4096) [ 220.327615][ T6071] cramfs: Error -5 while decompressing! [ 220.333326][ T6071] cramfs: ffffffff96b50568(26)->ffff888070eb5000(4096) [ 220.611843][ T5828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.893347][ T5373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.921225][ T4268] udevd[4268]: incorrect cramfs checksum on /dev/loop6 [ 220.934746][ T5373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.999414][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.048211][ T5373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.093522][ T5373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.171801][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.723652][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.741716][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.762551][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.785072][ T6095] IPVS: length: 32 != 8 [ 221.949891][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 222.095817][ T6074] loop6: detected capacity change from 0 to 32768 [ 222.361786][ T6074] XFS (loop6): Mounting V5 Filesystem [ 223.136568][ T6074] XFS (loop6): Ending clean mount [ 223.233140][ T6074] XFS (loop6): Quotacheck needed: Please wait. [ 223.438794][ T6074] XFS (loop6): Quotacheck: Done. [ 223.575567][ T6131] syzkaller0: create flow: hash 2281847152 index 1 [ 223.902310][ T4343] syzkaller0: tun_net_xmit 76 [ 223.911281][ T4343] syzkaller0: tun_net_xmit 48 [ 223.918786][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 223.918804][ T26] audit: type=1804 audit(1748881406.056:144): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.409" name="/newroot/53/file0/bus" dev="loop6" ino=9291 res=1 errno=0 [ 223.927454][ T4294] syzkaller0: tun_net_xmit 76 [ 223.952440][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.970346][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.015309][ T6129] syzkaller0: delete flow: hash 2281847152 index 1 [ 224.069193][ T26] audit: type=1804 audit(1748881406.196:145): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.409" name="/newroot/53/file0/bus" dev="loop6" ino=9291 res=1 errno=0 [ 224.273663][ T4930] XFS (loop6): Unmounting Filesystem [ 224.586958][ T26] audit: type=1326 audit(1748881406.726:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e84b8e969 code=0x7fc00000 [ 225.782447][ T26] audit: type=1326 audit(1748881407.916:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e84b8e969 code=0x7fc00000 [ 226.945562][ T6163] loop3: detected capacity change from 0 to 256 [ 227.022994][ T6163] FAT-fs (loop3): Directory bread(block 64) failed [ 227.030453][ T6163] FAT-fs (loop3): Directory bread(block 65) failed [ 227.042122][ T6163] FAT-fs (loop3): Directory bread(block 66) failed [ 227.066435][ T6163] FAT-fs (loop3): Directory bread(block 67) failed [ 227.090129][ T6163] FAT-fs (loop3): Directory bread(block 68) failed [ 227.168167][ T6163] FAT-fs (loop3): Directory bread(block 69) failed [ 227.185410][ T6163] FAT-fs (loop3): Directory bread(block 70) failed [ 227.220010][ T6163] FAT-fs (loop3): Directory bread(block 71) failed [ 227.234867][ T6163] FAT-fs (loop3): Directory bread(block 72) failed [ 227.241478][ T6163] FAT-fs (loop3): Directory bread(block 73) failed [ 230.748293][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 230.756707][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 230.789527][ T6196] device gtp0 entered promiscuous mode [ 230.835057][ T6200] netlink: 'syz.3.431': attribute type 16 has an invalid length. [ 230.843367][ T6200] netlink: 'syz.3.431': attribute type 17 has an invalid length. [ 230.882366][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.929791][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.938425][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.950352][ T6200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.967086][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.977607][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.989641][ T5828] device veth0_vlan entered promiscuous mode [ 231.005405][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.021419][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.045992][ T5828] device veth1_vlan entered promiscuous mode [ 231.449846][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.528966][ T6222] loop6: detected capacity change from 0 to 64 [ 231.652712][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.785621][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.835827][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.858071][ T5828] device veth0_macvtap entered promiscuous mode [ 232.064941][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.129651][ T5828] device veth1_macvtap entered promiscuous mode [ 233.559461][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.646890][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.714600][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.758973][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.797770][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.078881][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.495536][ T6237] loop3: detected capacity change from 0 to 256 [ 234.603500][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.659199][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.676617][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.870057][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.883545][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.886063][ T4268] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.906289][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.951358][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.091226][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.452612][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.604631][ T6252] overlayfs: failed to clone upperpath [ 235.655432][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.707129][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.754571][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.824550][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.869537][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.935715][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.952518][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.005561][ T5828] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.047391][ T5828] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.079403][ T5828] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.090082][ T5828] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.665165][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.673537][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.753252][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.781998][ T5372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.828355][ T5372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.888128][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.122153][ T6281] netlink: 156 bytes leftover after parsing attributes in process `syz.5.448'. [ 237.167626][ T6283] loop8: detected capacity change from 0 to 256 [ 237.287844][ T6283] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 237.409714][ T6283] bridge0: port 3(batadv0) entered blocking state [ 237.435572][ T6283] bridge0: port 3(batadv0) entered disabled state [ 237.452037][ T6283] device batadv0 entered promiscuous mode [ 237.586462][ T6283] bridge0: port 3(batadv0) entered blocking state [ 237.595020][ T6283] bridge0: port 3(batadv0) entered forwarding state [ 237.640185][ T6285] device batadv0 left promiscuous mode [ 238.463420][ T4451] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 238.468091][ T6285] bridge0: port 3(batadv0) entered disabled state [ 238.473361][ T4451] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 241.058586][ T6321] Unknown options in mask 5 [ 241.936938][ T6324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 242.164938][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 245.770887][ T6357] autofs4:pid:6357:autofs_fill_super: called with bogus options [ 246.106265][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.113543][ C0] bridge0: topology change detected, propagating [ 246.120310][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.127578][ C0] bridge0: topology change detected, propagating [ 246.878790][ T6369] Unknown options in mask 5 [ 247.466472][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.586742][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 247.633137][ T6359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.976760][ T6385] loop5: detected capacity change from 0 to 1024 [ 248.146923][ T6385] EXT4-fs: Ignoring removed nobh option [ 248.152643][ T6385] EXT4-fs: Ignoring removed bh option [ 248.231642][ T6391] netlink: 'syz.0.475': attribute type 2 has an invalid length. [ 248.883466][ T6390] loop6: detected capacity change from 0 to 128 [ 248.941133][ T6385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.036962][ T6390] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 249.097390][ T6390] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.110404][ T6385] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 249.192249][ T6390] EXT4-fs warning (device loop6): ext4_dirblock_csum_set:427: inode #2: comm syz.6.476: No space for directory leaf checksum. Please run e2fsck -D. [ 249.242734][ T4268] udevd[4268]: incorrect jbd checksum on /dev/loop6 [ 249.339291][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 0 [ 249.455606][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 1024 [ 249.457073][ T4268] udevd[4268]: incorrect jbd checksum on /dev/loop6 [ 249.504823][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 2048 [ 249.558554][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 3072 [ 249.595582][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 249.623478][ T4571] EXT4-fs (loop5): unmounting filesystem. [ 249.629599][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 4096 [ 249.715018][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 5120 [ 249.805010][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 6144 [ 249.933929][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 7168 [ 250.165041][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 8192 [ 250.196273][ T4930] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /69/file0/lost+found: directory fails checksum at offset 9216 [ 251.113518][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 251.156122][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 251.231523][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 251.322896][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 251.402691][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 251.549376][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 251.655451][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 251.749142][ T4930] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 253.064632][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 253.517513][ T6433] loop5: detected capacity change from 0 to 4096 [ 253.603483][ T6433] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 254.026390][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 254.152439][ T6433] EXT4-fs (loop5): unmounting filesystem. [ 254.233447][ T4297] usb 4-1: Using ep0 maxpacket: 16 [ 254.246702][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 254.278171][ T4297] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.304564][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.332964][ T4297] usb 4-1: Product: syz [ 254.344907][ T4297] usb 4-1: Manufacturer: syz [ 254.349568][ T4297] usb 4-1: SerialNumber: syz [ 254.376443][ T4930] EXT4-fs (loop6): unmounting filesystem. [ 254.392338][ T4297] usb 4-1: config 0 descriptor?? [ 254.444848][ T4297] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 254.470496][ T4297] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 254.641856][ T4359] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.807631][ T4359] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.016670][ T4297] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 255.025661][ T4359] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.053407][ T6439] loop8: detected capacity change from 0 to 40427 [ 255.102002][ T6439] F2FS-fs (loop8): Unrecognized mount option "age_extent_cache" or missing value [ 255.372695][ T4359] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.755365][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761913][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.243655][ T4297] em28xx 4-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 256.292836][ T4297] em28xx 4-1:0.0: board has no eeprom [ 256.394009][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.499'. [ 256.514787][ T4297] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 256.553929][ T4297] em28xx 4-1:0.0: dvb set to bulk mode. [ 256.627447][ T4297] usb 4-1: USB disconnect, device number 3 [ 256.634051][ T4297] em28xx 4-1:0.0: Disconnecting em28xx [ 256.741078][ T4296] em28xx 4-1:0.0: Binding DVB extension [ 256.807322][ T4258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.818889][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.828076][ T4258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.836131][ T4258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.845497][ T4258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.853018][ T4258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.890385][ T6481] loop8: detected capacity change from 0 to 512 [ 256.899212][ T6481] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 257.030730][ T4296] em28xx 4-1:0.0: Registering input extension [ 257.043470][ T4297] em28xx 4-1:0.0: Closing input extension [ 257.165327][ T4297] em28xx 4-1:0.0: Freeing device [ 257.511633][ T6481] EXT4-fs error (device loop8): ext4_do_update_inode:5253: inode #16: comm syz.8.501: corrupted inode contents [ 258.062105][ T6481] EXT4-fs error (device loop8): ext4_dirty_inode:6118: inode #16: comm syz.8.501: mark_inode_dirty error [ 258.146614][ T6481] EXT4-fs error (device loop8): ext4_do_update_inode:5253: inode #16: comm syz.8.501: corrupted inode contents [ 258.177150][ T6481] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.501: mark_inode_dirty error [ 259.051738][ T6481] EXT4-fs error (device loop8): ext4_do_update_inode:5253: inode #16: comm syz.8.501: corrupted inode contents [ 259.114685][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 259.174542][ T6481] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 259.215219][ T6481] EXT4-fs error (device loop8): ext4_do_update_inode:5253: inode #16: comm syz.8.501: corrupted inode contents [ 259.246780][ T6500] loop3: detected capacity change from 0 to 128 [ 259.260804][ T6496] loop5: detected capacity change from 0 to 8192 [ 259.284748][ T6481] EXT4-fs error (device loop8): ext4_truncate:4312: inode #16: comm syz.8.501: mark_inode_dirty error [ 259.318427][ T6481] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 259.323782][ T6500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 259.353005][ T6481] EXT4-fs (loop8): 1 truncate cleaned up [ 259.368111][ T5379] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 259.426112][ T6500] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.434971][ T6481] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 259.440564][ T6496] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 259.448859][ T5379] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:30: Failed to release dquot type 1 [ 259.459167][ T6481] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.474654][ T6496] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 259.605310][ T6496] REISERFS (device loop5): using ordered data mode [ 259.611968][ T6496] reiserfs: using flush barriers [ 259.666448][ T6500] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:427: inode #2: comm syz.3.506: No space for directory leaf checksum. Please run e2fsck -D. [ 259.715486][ T6496] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.727571][ T4242] udevd[4242]: incorrect jbd checksum on /dev/loop3 [ 259.775049][ T6496] REISERFS (device loop5): checking transaction log (loop5) [ 259.818883][ T6496] REISERFS (device loop5): Using r5 hash to sort names [ 259.856490][ T6496] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 259.882225][ T6496] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 260.028282][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 0 [ 260.081448][ T4242] udevd[4242]: incorrect jbd checksum on /dev/loop3 [ 260.186555][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 1024 [ 260.222743][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 2048 [ 260.286952][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 3072 [ 260.365547][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 260.416255][ T5828] EXT4-fs (loop8): unmounting filesystem. [ 260.438625][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 4096 [ 260.484974][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 5120 [ 260.519864][ T6476] chnl_net:caif_netlink_parms(): no params data found [ 260.557272][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 6144 [ 260.645024][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 7168 [ 261.118844][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 8192 [ 261.144751][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 261.610828][ T5624] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /22/file0/lost+found: directory fails checksum at offset 9216 [ 261.650902][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.671282][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.692430][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.714142][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.820286][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.894316][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.932259][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.963082][ T6535] loop8: detected capacity change from 0 to 1024 [ 261.979212][ T5624] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 261.992101][ T6535] EXT4-fs: Ignoring removed nobh option [ 262.012512][ T6535] EXT4-fs: Ignoring removed bh option [ 262.019139][ T6535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.049448][ T6535] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 262.104828][ T4296] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 262.270878][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.303420][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.314974][ T4296] usb 6-1: Using ep0 maxpacket: 16 [ 262.330672][ T4296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 262.365761][ T6476] device bridge_slave_0 entered promiscuous mode [ 262.411580][ T5828] EXT4-fs (loop8): unmounting filesystem. [ 262.422365][ T4296] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 262.432380][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.440897][ T4296] usb 6-1: Product: syz [ 262.445565][ T4296] usb 6-1: Manufacturer: syz [ 262.450290][ T4296] usb 6-1: SerialNumber: syz [ 262.475419][ T4296] usb 6-1: config 0 descriptor?? [ 262.529532][ T4296] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 262.560197][ T4296] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 262.721296][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.728847][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.769963][ T6476] device bridge_slave_1 entered promiscuous mode [ 263.088999][ T4296] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 263.128292][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.192720][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.314678][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 263.442156][ T4359] device hsr_slave_0 left promiscuous mode [ 263.448928][ T4359] device hsr_slave_1 left promiscuous mode [ 263.615142][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.705998][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.968080][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.145864][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.176995][ T4359] device vxlan0 left promiscuous mode [ 264.184087][ T4359] bridge0: port 3(vxlan0) entered disabled state [ 264.222399][ T4296] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 264.240449][ T4296] em28xx 6-1:0.0: board has no eeprom [ 264.286000][ T4359] device bridge_slave_1 left promiscuous mode [ 264.292319][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.326343][ T4359] device bridge_slave_0 left promiscuous mode [ 264.332636][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.417294][ T4359] device veth1_macvtap left promiscuous mode [ 264.423410][ T4359] device veth0_macvtap left promiscuous mode [ 264.436482][ T4359] device veth1_vlan left promiscuous mode [ 264.447109][ T4359] device veth0_vlan left promiscuous mode [ 265.318855][ T6557] em28xx 6-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 265.388361][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 265.397160][ T4296] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 265.405388][ T4296] em28xx 6-1:0.0: dvb set to bulk mode. [ 265.423667][ T4300] em28xx 6-1:0.0: Binding DVB extension [ 265.456768][ T4296] usb 6-1: USB disconnect, device number 3 [ 265.463324][ T4296] em28xx 6-1:0.0: Disconnecting em28xx [ 265.539849][ T4300] em28xx 6-1:0.0: Registering input extension [ 265.546835][ T4296] em28xx 6-1:0.0: Closing input extension [ 265.606707][ T4296] em28xx 6-1:0.0: Freeing device [ 265.779204][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 265.837996][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 265.894003][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.020453][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.487676][ T4359] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 266.906244][ T4359] bond0 (unregistering): Released all slaves [ 267.082789][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 267.095196][ T6579] infiniband syz1: set active [ 267.139342][ T6476] team0: Port device team_slave_0 added [ 267.220669][ T6476] team0: Port device team_slave_1 added [ 267.269980][ T5624] EXT4-fs (loop3): unmounting filesystem. [ 267.406575][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.413586][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.504965][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.527068][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.552121][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.578957][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.190495][ T6476] device hsr_slave_0 entered promiscuous mode [ 268.221048][ T6476] device hsr_slave_1 entered promiscuous mode [ 268.267936][ T6476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.294783][ T6476] Cannot create hsr debugfs directory [ 269.118323][ T6476] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 269.210798][ T6476] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 269.286755][ T6476] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 269.437348][ T6476] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 269.968617][ T6623] delete_channel: no stack [ 270.564698][ T4359] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.668510][ T4359] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.963438][ T4359] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.017307][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.065280][ T6633] loop5: detected capacity change from 0 to 256 [ 271.120625][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.139346][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.148470][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.159652][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.168600][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.177930][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.247466][ T4359] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.285273][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.350124][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.385348][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.422688][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.465764][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.495192][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.502396][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.552409][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.584160][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.615661][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.654731][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.661909][ T4592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.821502][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.465262][ T6476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.519801][ T6476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.625789][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.645265][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.740097][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.918632][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.994599][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.014678][ T6655] kAFS: unable to lookup cell ' [ 273.014678][ T6655] >.€·?](<â›' [ 273.014678][ T6655] Ø¡—§P!×0Ä^O¹œ[àÆZéøvMTölÆAèÉß/H=9.äÜb>9ðF9ºÙ*‰ŒmªTS¶û' [ 273.045664][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.152873][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.236753][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 273.638285][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.647573][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.656463][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.664947][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.966224][ T6660] loop5: detected capacity change from 0 to 2048 [ 274.067134][ T6660] UDF-fs: warning (device loop5): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 274.745036][ T6630] chnl_net:caif_netlink_parms(): no params data found [ 274.916040][ T6678] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 274.963620][ T6684] loop5: detected capacity change from 0 to 512 [ 275.149046][ T6684] EXT4-fs (loop5): 1 orphan inode deleted [ 275.173344][ T6680] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 275.173410][ T4299] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 275.194784][ T6684] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 275.234656][ T6684] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.300303][ T4299] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:5: Failed to release dquot type 1 [ 275.312753][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 275.341183][ T6686] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 275.371418][ T6686] bond1 (unregistering): Released all slaves [ 275.458517][ T4571] EXT4-fs (loop5): unmounting filesystem. [ 276.277326][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.294142][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.392955][ T6630] device bridge_slave_0 entered promiscuous mode [ 277.008568][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.062531][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.182398][ T6630] device bridge_slave_1 entered promiscuous mode [ 277.384561][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 277.647227][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.681788][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.312321][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.464845][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 279.536722][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.919371][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.010220][ T6630] team0: Port device team_slave_0 added [ 280.287792][ T6630] team0: Port device team_slave_1 added [ 280.402891][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.415051][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.474539][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.499740][ T6717] bridge0: port 3(batadv0) entered blocking state [ 280.516830][ T6717] bridge0: port 3(batadv0) entered disabled state [ 280.548986][ T6717] device batadv0 entered promiscuous mode [ 280.557586][ T6717] bridge0: port 3(batadv0) entered blocking state [ 280.564258][ T6717] bridge0: port 3(batadv0) entered forwarding state [ 280.609615][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.617813][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.673910][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.726971][ T6719] device batadv0 left promiscuous mode [ 280.732687][ T6719] bridge0: port 3(batadv0) entered disabled state [ 280.936922][ T6630] device hsr_slave_0 entered promiscuous mode [ 280.963302][ T6630] device hsr_slave_1 entered promiscuous mode [ 281.000220][ T6630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.018148][ T6630] Cannot create hsr debugfs directory [ 281.503380][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.523766][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.565585][ T4359] device hsr_slave_0 left promiscuous mode [ 281.581099][ T4359] device hsr_slave_1 left promiscuous mode [ 281.603561][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.628736][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.646459][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.653948][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.670214][ T4359] device bridge_slave_1 left promiscuous mode [ 281.678927][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.717165][ T4359] device bridge_slave_0 left promiscuous mode [ 281.723533][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.805475][ T4359] device veth1_macvtap left promiscuous mode [ 281.811590][ T4359] device veth0_macvtap left promiscuous mode [ 284.010528][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 284.180256][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 284.274041][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.355367][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.391878][ T4359] bond0 (unregistering): Released all slaves [ 285.650076][ T6762] infiniband syz2: set down [ 285.655028][ T6762] infiniband syz2: added ipvlan1 [ 285.660453][ T6762] rdma_rxe: unable to create cq [ 285.665461][ T6762] infiniband syz2: Couldn't create ib_mad CQ [ 285.671595][ T6762] infiniband syz2: Couldn't open port 1 [ 285.689854][ T6762] RDS/IB: syz2: added [ 285.694198][ T6762] smc: adding ib device syz2 with port count 1 [ 285.700702][ T6762] smc: ib device syz2 port 1 has pnetid [ 286.012953][ T6476] device veth0_vlan entered promiscuous mode [ 286.031482][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.045905][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.067062][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.082093][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.140783][ T6476] device veth1_vlan entered promiscuous mode [ 287.644721][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.653610][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.751487][ T6476] device veth0_macvtap entered promiscuous mode [ 287.821359][ T6476] device veth1_macvtap entered promiscuous mode [ 288.120260][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.439040][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.567107][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.577920][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.588042][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.620166][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.680055][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.815988][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.845858][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.895348][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.932928][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.964602][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.011251][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.032059][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.057810][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.082340][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.094244][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.168490][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.187387][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.206911][ T6476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.222253][ T6476] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.232001][ T6476] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.247791][ T6476] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.542531][ T6630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.581025][ T6630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.588264][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.606879][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.688380][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.707531][ T6630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.780299][ T6630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.920354][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.940986][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.023160][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.348399][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.442786][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.473032][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.526591][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.129126][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.171199][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.244774][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.251908][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.426123][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.453007][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.604900][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.722881][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.730108][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.838974][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.908359][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.963354][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.050352][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.085726][ T4267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.097607][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.106441][ T4267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.114491][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.124274][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.141345][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.200716][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.259557][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.301994][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.398838][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.435703][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.518851][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.548435][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.643768][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.226187][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 295.779460][ T6858] netlink: 'syz.8.570': attribute type 8 has an invalid length. [ 295.819348][ T6858] bridge0: port 3(syz_tun) entered blocking state [ 295.843936][ T6858] bridge0: port 3(syz_tun) entered disabled state [ 295.872407][ T6858] device syz_tun entered promiscuous mode [ 295.907287][ T6858] bridge0: port 3(syz_tun) entered blocking state [ 295.913850][ T6858] bridge0: port 3(syz_tun) entered forwarding state [ 401.344400][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 401.351390][ C0] (detected by 0, t=10502 jiffies, g=34185, q=14 ncpus=2) [ 401.358590][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294977252-4294966750), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 401.372132][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34185 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 401.383322][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 401.393424][ C0] rcu: RCU grace-period kthread stack dump: [ 401.399320][ C0] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 401.410124][ C0] Call Trace: [ 401.413409][ C0] [ 401.416359][ C0] __schedule+0x10e9/0x40d0 [ 401.420896][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 401.426113][ C0] ? _raw_spin_unlock+0x40/0x40 [ 401.430974][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 401.436917][ C0] schedule+0xb9/0x180 [ 401.441016][ C0] schedule_timeout+0x15c/0x280 [ 401.445919][ C0] ? console_conditional_schedule+0x40/0x40 [ 401.451851][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 401.457858][ C0] ? update_process_times+0x1b0/0x1b0 [ 401.463240][ C0] ? prepare_to_swait_event+0x335/0x350 [ 401.468798][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 401.473669][ C0] ? rcu_gp_kthread+0x380/0x380 [ 401.478545][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 401.484553][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 401.489320][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 401.494176][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 401.499382][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 401.504596][ C0] rcu_gp_kthread+0x95/0x380 [ 401.509188][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 401.514299][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 401.520199][ C0] ? __kthread_parkme+0x162/0x1c0 [ 401.525246][ C0] kthread+0x29d/0x330 [ 401.529317][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 401.534428][ C0] ? kthread_blkcg+0xd0/0xd0 [ 401.539038][ C0] ret_from_fork+0x1f/0x30 [ 401.543472][ C0] [ 401.546486][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 401.552818][ C0] CPU: 0 PID: 6873 Comm: syz.8.573 Not tainted 6.1.140-syzkaller #0 [ 401.560805][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.570887][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 401.576731][ C0] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ce 2e 4a f7 48 89 df e8 26 f4 4a f7 e8 91 f6 6d f7 fb bf 01 00 00 00 36 71 3e f7 65 8b 05 d7 32 e9 75 85 c0 74 02 5b c3 e8 24 44 e7 [ 401.596356][ C0] RSP: 0018:ffffc90003867bb8 EFLAGS: 00000286 [ 401.602436][ C0] RAX: e57f31e17a445200 RBX: ffff888077440000 RCX: e57f31e17a445200 [ 401.610414][ C0] RDX: dffffc0000000000 RSI: ffffffff8a6c0000 RDI: 0000000000000001 [ 401.618392][ C0] RBP: ffff888077440498 R08: dffffc0000000000 R09: ffffed100ee88001 [ 401.626362][ C0] R10: ffffed100ee88001 R11: 1ffff1100ee88000 R12: 1ffff1100ee88093 [ 401.634330][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 401.642306][ C0] FS: 00007fb5d148b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 401.651236][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.657818][ C0] CR2: 000020000006b000 CR3: 0000000044723000 CR4: 00000000003506f0 [ 401.665795][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.673784][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.681768][ C0] Call Trace: [ 401.685050][ C0] [ 401.688021][ C0] get_signal+0x1163/0x1350 [ 401.692559][ C0] arch_do_signal_or_restart+0xb0/0x1230 [ 401.698199][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 401.703841][ C0] ? load_gs_index+0x120/0x120 [ 401.708617][ C0] ? get_sigframe_size+0x10/0x10 [ 401.713573][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 401.719044][ C0] exit_to_user_mode_loop+0x70/0x110 [ 401.724333][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 401.729891][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 401.735350][ C0] do_syscall_64+0x58/0xa0 [ 401.739769][ C0] ? clear_bhb_loop+0x60/0xb0 [ 401.744451][ C0] ? clear_bhb_loop+0x60/0xb0 [ 401.749130][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.755032][ C0] RIP: 0033:0x7fb5d058e967 [ 401.759469][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 401.779097][ C0] RSP: 002b:00007fb5d148b0e8 EFLAGS: 00000246 [ 401.785193][ C0] RAX: 00000000000000ca RBX: 00007fb5d07b5fa8 RCX: 00007fb5d058e969 [ 401.793173][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb5d07b5fa8 [ 401.801142][ C0] RBP: 00007fb5d07b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 401.809110][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5d07b5fac [ 401.817099][ C0] R13: 0000000000000000 R14: 00007ffc32771bd0 R15: 00007ffc32771cb8 [ 401.825085][ C0]