last executing test programs: 29.190921499s ago: executing program 4 (id=1240): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000001600)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) connect(r0, &(0x7f0000000200)=@nl=@unspec={0x0, 0x3e8}, 0x80) 17.233341364s ago: executing program 1 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.431693527s ago: executing program 3 (id=1328): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x12, 0x90b83253ecd83317, 0x0, 0x0, {}, [@RTA_FLOW={0x8, 0xb, 0x4}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x300, 0xc68, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x10, 0x0, @private}}, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 4.238082715s ago: executing program 3 (id=1331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 3.754636314s ago: executing program 2 (id=1332): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.599217886s ago: executing program 3 (id=1334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 3.137703765s ago: executing program 1 (id=1285): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, {}, {}, 0xff, 0x1}], 0x20) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.075422569s ago: executing program 3 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="010000004000"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x51e, &(0x7f0000000100)="$eJzs3dFrJHcdAPDvTLLX5C41qfqgBWuxlUvV2ySN1wYfqoLoU0Gt+HrGZBNCNtkj2bSXUGyKf4AgogVf9MkXwT9AkL74LkJB30VFkXrVB4X2RmZ29u6y2U1yuJuB5POBX3Z+M7Pz/f427G9/v51hJ4BL6+mImI2IsYh4LiKmy/VpWeKwU/L93rv7+kpeksiyV95NIinXdY/1WPl4rXzaRER882sR302Ox93dP9hcbjYbO2V9rr2VvJ9lBzc2tpbXG+uN7cXFhReWXly6uTQ/lHbORMRLX/nrj3/wi6++9JvPvfanW3+f/V6e1n+z7I3oaccwdZpeK16LrvGI2BlFsIqMFy3suFlxLgAAnCwf7384Ij5VjP+nY6wYzQEAAAAXSfbFqXg/icgAAACACyuNiKlI0np5ve9UpGm93rmG96NxNW22dtufXWvtba/m2yJmopaubTQb8+W1AzNRS/L6QnmNbbf+fE99MSKeiIgfTU8W9fpKq7la9ZcfAAAAcElc65n//3u6M/8vHFacHAAAADA8M1UnAAAAAIyc+T8AAABcfOb/AAAAcKF9/eWX85J173+9+ur+3mbr1Rurjd3N+tbeSn2ltXO7vt5qrRe/2bd12vGardbtz8f23p25dmO3Pbe7f3Brq7W33b61ceQW2AAAAMA5euKTb/8xiYjDL0wWJXel3FaLyMYe3nm8igyBUUkfZee/jC4P4Pw9/Pk+WWEewPkzpIfLq1Z1AkDlklO2D7x453fDzwUAABiN6x8ffP7/3bVKUwNGrDz/n5w2/wcunrGqEwAq0zn/dy/rqDob4DzVThoBmBTAhZcO5/z/KZcSJjoUAACo2FRRkrRezgOmIk3r9YjHi9sC1JK1jWZjPiI+FBF/mK49ltcXimcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcEZZlkQGAAAAXGgR6d+6d+a6Pv3sVO/3A1eS/0wXjxHx2k9f+cmd5XZ7ZyFf/8/769tvleufr+IbDAAAAKBXd57enccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDC9d/f1lW45z7j/+HJEzPSLPx4TxeNE1CLi6r+SGH/oeUlEjA0h/uGbEfGxfvGTPK2YKbM4Ev9KRBoRk8OK3/f1PyF+dOJfG0J8uMzezvufL/V7/6XxdPHY//03Xpb/1+D+L73f/40N6P8eH3TQ2tHqk+/8am5g/Dcjnhzv3/904yf58frEf+aMbfzOtw4OBm3Lfh5xvV//lxyNNdfeuj23u39wY2Nreb2x3theXFx4YenFpZtL83NrG81G+bdvjB9+4tf3HtQ+ONb+qyf0v0X7B7z+z56x/R+8c+fuRzqLPf+ZqMXPsmz2mf7//8JnjsfvfvZ9utwrr+evYfrWt/vGf+qXv39qUG55+1cHtH/ilPbPnrH9z33j+38+464AwDnY3T/YXG42GzsWLDzCQj7urDyNJJI4vmm5+sQ6C2+U77HlZvfdNqQj/7acHI0y+Yr6IwAAYHQeDPp7tyTVJAQAAAAAAAAAAAAAAAAAAACX0Kk/AzZoUxoRZ/w5sd6Yh9U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8LAAD//0mN1e4=") lstat(&(0x7f0000005b80)='./file2\x00', 0x0) 3.033417353s ago: executing program 0 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0xfd, 0x1ff}], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.802094302s ago: executing program 2 (id=1337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYBLOB="2c5e6fe39a644dabe72a06303030303030303030303030303030307365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 2.57323788s ago: executing program 0 (id=1338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYBLOB="2c5e6fe39a644dabe72a06303030303030303030303030303030307365725f69643d", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 2.198911601s ago: executing program 0 (id=1339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYBLOB="2c5e6fe39a644dabe72a0630303030303030303030303030303030736572", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 2.133870246s ago: executing program 2 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x0, 0x0, @dev}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/1924], 0x784}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r9, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1000020000000000afb648a2245213d0e82c50e7effda50fa36ee08f40ce87ec275a"], 0x10}, {&(0x7f0000000440)=ANY=[@ANYBLOB="1000000029100000000000000000000084cf6527212a7f3718e9d7b409f3856b86fcf06aa8874b6e3dbd8ce073cc44f87b3c06f1"], 0x10}], 0x2}, 0x0) r10 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32, @ANYBLOB="3e9aa8e9a55ea27e16f328b441459f770d0fae217f7aa1873e6f8c838a3407fc183c180712d7fa59049493dda10a938ecb13d2a2769193307dcdd76d7bef7ee3cef5ca88641c4e6c9a9bff99558e8772603c56e0857a0b5b455dd435da0e12bccd36558edd33332ead137065c3e5434f62373e3b80ca7b6cf2ca736e4b4aba5d", @ANYBLOB="ba0f2bed16228fd41e2f7134373f4be75c3bb494542fe40ba39fc978276a0df4ebcd5d5d70b506fb3e196e2f9660dcc55ab6cffeca1a48775b45d0f8", @ANYRES64=0x0], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES16=r10, @ANYRES32=0x0, @ANYBLOB="00000000000064676576650a000100be77f8fd6f5e30afdae13237cfe697cab375ddb7d47643f6df3eac0c6858a3cd8f2d"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="680f0000080211000000ffffffffffff0802110000008efffffffffffeffffffffffffff0802110000015d002838ed2955319e11a7deca1ddfb7c9f317064685e4323fb7df7096561e753a180d87aca5796adb991a1efe673aab0969e7fb29a33e2e420c72af472009b4ccc49c5dd2e16cea005a03bcc9f87d0b36ff392a7ca7bedeeda17ff7f6b3ac00"], 0x8a) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000000010000000000", 0x58}], 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xa00}], 0x1000000000000076, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x6, r10, &(0x7f0000000280)="c7f445099371ebced758fab0428c82d7cfee856dd905591b1484c4f94791e7a926ef20ed3115755a286cb6e5b1fb9b6bd0c27f488ea0757292b0d1d2e6927fe0ed711b5fc67b4e098c9d428546de68fb90bb88177bf9f48b18", 0x59, 0x3, 0x0, 0x0, r11}, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.08621796s ago: executing program 1 (id=1341): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffe}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000440)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2004, 0x2004}}, 0x10, 0x0}, 0x0) 1.96563466s ago: executing program 4 (id=1281): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xfc2, &(0x7f0000000180)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_GET_NESTED_STATE(r5, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$KVM_GET_MSRS(r5, 0x8004ae98, &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 1.939910142s ago: executing program 1 (id=1342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 1.919722884s ago: executing program 0 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x545, &(0x7f0000000bc0)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file1\x00', 0x0) 1.817944742s ago: executing program 3 (id=1344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 1.738506209s ago: executing program 1 (id=1345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYBLOB="2c5e6fe39a644dabe72a06303030303030303030303030303030307365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 1.558571443s ago: executing program 4 (id=1346): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x3, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd300}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.555970733s ago: executing program 3 (id=1347): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.506416648s ago: executing program 1 (id=1348): socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000280)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.362042589s ago: executing program 0 (id=1349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYBLOB="2c5e6fe39a644dabe72a06303030303030303030303030303030307365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 1.297425345s ago: executing program 4 (id=1350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYBLOB="2c5e6fe39a644dabe72a06303030303030303030303030303030307365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 1.2358146s ago: executing program 2 (id=1351): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = add_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="5a4e747b847ea363dc056da7bac469e23447eaf6c8adeb4e8502ad06548068d39a62c3919610cc7bab908a45198c606381ff1fe760109495f23a48da62d2b240369ed0a292bdd0d79314b569f6afadd401394d1b0537f3d5d2f734816b0192defa06ab02a1899f603ac37a8c2e4feae5037c8460f94e3000b5f0d06e85e809fed310ac7174f3351997f04dbc4119974e6c53e99ffd7c4545d4a0493b6d52eb4e2e65f3f8ffdd044c69bae57064e6a175dcbb739790f4959ce8e8afb83f886fd5002956", 0xc3, 0xfffffffffffffff9) pipe2$watch_queue(&(0x7f0000000640)={0xffffffffffffffff}, 0x80) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc2}, &(0x7f0000000880)={0x0, "f3770fbc00d5dab0b85e939e94f77a7c89d8963ddf5a054c2b889998cc753701adf71df463a3b1ddec2cae44d49f29d876da40cddc6e8e3abe6aab32e050514e", 0x29}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x9f) r3 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='{\x00', r0) request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='logon\x00', r3) add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)="8bc3c1aa240e4257af2d89389593d0cb9853d84fa3a29d9b493c6eb9cb0abf86ad7f863dbe5530148329bd14d8b208417177f1ea7cb96ac03624db29410dd83b78b32fc5fc76491369c80082c9e8817b71cddd80df8979aacfe79ffdbdea9f439214b79a09f48f40b3359f7d9dddc7d6b91d4039bdb863098ecda74500e7e183f1b057f90a890f8a0851e9aeea099d661ad3336308ff878b7d7c42d39518616ca26306370c1924fac331c73b2f5cee4794e942915137d54233c82b13f45c8d5943731bbbe58d64b0e07e0bae5d000b85f410903c42f2abebafdf8d0465b6f335f5f1571f7122ce80d62f26486b7e", 0xee, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r0, 0x1) 1.144055187s ago: executing program 4 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 1.066119294s ago: executing program 2 (id=1353): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$eJzs3V9sHVdaAPDvjO3YSdHupduk3aVa3RapG7JssJ1t08or0VBjsWy2NXW8C5SH3sROuMS5vrKdblrBbnjqA0iYReKFRUJCiyoeVkZoH+BpkZB4tdC+IaSwLKUIId2HrfqCajRzz42vHacJdRznz+8nJd/cme/MnDlnMjN3zh0lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICIX/rlU6Njab9rAQDcTS/PvDo67voPAA+VM77/AwAAAAAAAAAAAADAvS5FEe9Fim882UmvV5+7Rk43W5evzE5O7VzsYKpKDlT55Z+RsfETX3z2uZPP9+JHl7/TPh2vzJw5VX9p8VJ7aX55eX6uPttqnlucm7/tNey2/HbHqgaoX7p4ee78+eX6+PETWxZfqb07/MiR2sTJsdcO93JnJ6emZvpyBoc+9tZvcLM3PA5EEecjxcV33kuNiChi921xi2Nnrx2sduJYtROzk1PVjiw0G62VcuF0ryGKiFpfoRd7bXQX+mJX6hFXy+qXFT5W7t5Mu7HUOLswX59uLK00V5qLrenUrW2q0ot4PkW0I6IzfOPqhqKIb0aKt7/TSWcjYqDXDp+vXgy+dX2KPdjH2zAYEbWhiPXiPuize9hwFPG9SPHtb43GudyuVbM9E/HVMh6JuFzGaxGrZfxsRCoPkMci3t/heOL+MhhF/EGk+MlEJ831+r46r5z+Wv3LrfOLfbm988p9f324m+7xc9NIFNGozvid9PFvdgAAAAAAuPcU8ceR4qkfHk3t6B9TbLYu1M80zi50nwr3nv3Xc6mNjY2NWurG0Rync2znuJrjWo7rZYzNFdSKXD7H6RzbOa7muJbjeo6dHGsDuXyO0zm2c1zNcS3H9Rw7OdYGc/kcpwerml1t58+rOa7luJ5jZ3A/+gkAAAAAAAAAbu5gFPH1SPHML7xRvVcc1Xvpn5w4+erxX+1/Z/yJW6ynzD0eEWvF7b2TeyC/OjydplPap3eI6b7/93v5/b/f3+/KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+6qIIp6OFG98v5MiRUQ94vXoxmvD+107AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgThhJRbwfKf70KyPV5/Ui4jcj4sONDzci4tqHG3fafu8xAAAAAAAAADyAUhFvRoqnX+2kWkRcqb07/MiR2sTJsdcOD8RApDKlP/+VmTOn6i8tXmovzS8vz8/VZ1vNc4tz87e7uZHTzdblK7OTU3uyM7d0cI/rf3DkpcX2m0vNC7+9suPyQyOnzi6vLDXO7bw4DkYRUe+fc6yq8OzkVFXphWajVRWdTrdbYwAAAAAAAAAeBkOpiA8jxdt/9c71cefB7pj/4Pbc734posjTk3n8+fowdPW7gU9UvxvoTn9y4uSvjX+mf3rHIetj1YB6fXZyamqmb/bg0I2pI3m7o7vbZfqU/b8SKf7wz+vpqTxva/8PXM/97u9u9vfV7Su6SZ//P/p/S4/3+v+n++aV20ypiL+JFD/z60/EU1U9D8UNv5nIeV+JFL+x9mTOiwNl3tN5+aPV3yPnmwvzo2XulUjxD5e35j6Tcz+1mTt2u+16vyj7/+lI8d+/tXa9bXL/5x7Y7LX+/v/M9qNj9/2/47//R/vm1fJ2f/bO7DoRsfzmWxcbCwvzSw/jxMC9UQ0TJnaeiKv7t/X9PjNxN5TX/69Hir//k3+5fr+Tr/8/FdVt1eb93wff3Lz+T2xf0R5d/z/VN28i340MDUaMrFxqDz0eMbL85ltfaF5qXJi/MN86cfKF58ZHXxgbPTF0oHdztzm1fcs3fL95GJX9/zuR4ns/+uv4XJ639f5v5/v/Q9tXtEf9/1jfvENb7ld2vevk/v/fSPFPkz+Io3neR93/977/H8034dfvz/eo/w/3zau+430i4uf65h09HPHAfSkDAACAOyylIn6Qx1NHbzGe+o+R4q3/+vmcl46UeS/m5bXq75GXF1tfOLWwsHiusdI4uzBfn2k3zs2XZX8cKTp/+WQuW1Tjq73x5u4Y7+ZY7D9Hihd+pZfbHYvtPZt6bDN3rMw9Hin+6OWtub3nGIc3c8fL3H+NFGOv7Zx7ZDP3RJn7n5Higz+r93IPlblfyrmPb+YeP7e4MLcH3QIAAAAAALsylIp4LlL83YnB1Hu+fTu//7zhofce/f7v8b55c3fpfZVdNyoA3OPK6//R8qr+i39xfSx/6/V/8z2Z/uv/dv3/b8DNpj/O9b92Z3YTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KGToojFSPGNJzvp2nD5uWvkdLN1+crs5NTOxQ6mquRAlV/+GRkbP/HFZ587+XwvfnT5O+3T8crMmVP1lxYvtZfml5fn5+qzrea5xbn5217Dbstvd6xqgPqli5fnzp+PGD9+YsviK7V3hx85Ups4Ofba4V7u7OTU1ExfzuDQx976DXr9WmybfyCK+J9IcfGd99K/Deflu2yLWxw7e+1gFPG3EVHuxOzkVLUjC81Ga6VcON3XELW+Qi/22ugu9MWu1COultUvK3ys3L2ZdmOpcXZhvj7dWFpprjQXW9OpW9tUpRfxfIpoR0Rn+MbVDUURQ5Hi7e900o+GIwZ67fD5l2deHR2/SSVGNie3H1B3yWBE1IYi1ov7oM/uYcNRxLOR4tvfGo1/H+62a9Vsz0R8tYxHIi6X8VrEahk/G5HKA+SxiPd3OJ64vwxGEY9Gip9MdNKPh3PfV+eV01+rf7l1frEvt3deue+vD3fTPX5uGoki3qvO+J30H/49AwAAAAA8QIp4IlI89cOjqRofvD6m2GxdqJ9pnF3oPtbvPfuv51IbGxsbtdSNozlO59jOcTXHtRzXc+zkWCty+Rync2znuJrjWo7rOXZyrA3k8jlO59jOcTXHtRzXc+zkWBvM5XOczrGd42qOazmu59gZ3M/+AgAAAAAAANhZEUV8LlK88f1O2hjuDvC+Ht14zftAD7z/CwAA//9v9lF3") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 911.668166ms ago: executing program 0 (id=1354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYBLOB="2c5e6fe39a644dabe72a06303030303030303030303030303030307365725f69", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) 507.47µs ago: executing program 2 (id=1356): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x5c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='^'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 0s ago: executing program 4 (id=1357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", 0x0, 0xa7c}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x653f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x2c, 0x19, 0x5, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8}, @RTA_MARK={0x8, 0xf}]}, 0x2c}}, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109500000000007b00c0ff00000000950000000000000041acd20267c88fcaf4"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x541b, 0xffefff1f00000000) r9 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYRESHEX=r10, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000400"/40], 0x28) kernel console output (not intermixed with test programs): 08][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.838466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.852491][ T7751] EXT4-fs (loop4): unmounting filesystem. [ 319.863230][ T7758] EXT4-fs (loop2): unmounting filesystem. [ 319.936564][ T7877] device veth1_macvtap entered promiscuous mode [ 319.954798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.976332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.007892][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.049012][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.090666][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.120980][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.143831][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.165329][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.182387][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.201236][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.225762][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.247404][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.268640][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.291103][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.314296][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.339264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.361400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.382621][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.420811][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.440622][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.462037][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.500741][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.520553][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.530402][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.559785][ T3634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.561692][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.578890][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.579190][ T3634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.598408][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.608711][ T3634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.619173][ T3634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.626521][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.637205][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.647498][ T3634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 320.654903][ T3634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.662488][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.694896][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.705075][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.713643][ T3645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.723112][ T3645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.732514][ T3645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 320.734204][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.747919][ T3645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.797190][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.809217][ T7877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.818356][ T7877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.827580][ T7877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.836356][ T7877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.888989][ T8042] device syzkaller0 entered promiscuous mode [ 321.045805][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.062528][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.119572][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.176388][ T7891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.200722][ T7891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.218350][ T8049] dccp_close: ABORT with 181 bytes unread [ 321.253682][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.346726][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 321.362046][ T8055] fuse: Unknown parameter '"0x000000000000000b' [ 321.466308][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.518108][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 321.541449][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 321.550699][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 321.588779][ T8060] fuse: Unknown parameter '"0x000000000000000b' [ 321.650149][ T8062] loop1: detected capacity change from 0 to 128 [ 321.712322][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 321.743004][ T8062] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 321.832350][ T8062] loop1: detected capacity change from 128 to 0 [ 321.845658][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.905439][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.930210][ T8039] device bridge_slave_0 entered promiscuous mode [ 321.949773][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.971832][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.979525][ T8036] device bridge_slave_0 entered promiscuous mode [ 321.986636][ T7877] sysv_free_block: trying to free block not in datazone [ 322.009908][ T7877] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 322.018396][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.033580][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.049411][ T8039] device bridge_slave_1 entered promiscuous mode [ 322.089573][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.138098][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.155124][ T8036] device bridge_slave_1 entered promiscuous mode [ 322.201563][ T8039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.251176][ T8039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.329079][ T8085] dccp_close: ABORT with 20 bytes unread [ 322.339917][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.381311][ T8039] team0: Port device team_slave_0 added [ 322.390278][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.484026][ T8039] team0: Port device team_slave_1 added [ 322.495011][ T8036] team0: Port device team_slave_0 added [ 322.567280][ T8036] team0: Port device team_slave_1 added [ 322.603965][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.631079][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.679141][ T8039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.705593][ T3634] Bluetooth: hci1: command tx timeout [ 322.711562][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.711580][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.711602][ T8039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.805737][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 322.848244][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.850954][ T3634] Bluetooth: hci5: command tx timeout [ 322.875384][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.907420][ T8091] fuse: Unknown parameter '"0x000000000000000b' [ 322.927902][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.991039][ T8039] device hsr_slave_0 entered promiscuous mode [ 322.998106][ T8039] device hsr_slave_1 entered promiscuous mode [ 323.005455][ T8039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.013490][ T8039] Cannot create hsr debugfs directory [ 323.019792][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.036164][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.063388][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.118557][ C0] eth0: bad gso: type: 1, size: 1408 [ 323.169582][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 323.191212][ T8036] device hsr_slave_0 entered promiscuous mode [ 323.202242][ T8036] device hsr_slave_1 entered promiscuous mode [ 323.215596][ T8036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.225234][ T8101] fuse: Unknown parameter '"0x000000000000000b' [ 323.231955][ T8036] Cannot create hsr debugfs directory [ 323.356275][ T8103] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.422561][ T3641] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 323.528641][ T8039] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.655833][ T8039] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.670923][ T3641] usb 2-1: Using ep0 maxpacket: 32 [ 323.711921][ T3760] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.783686][ T8039] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.821521][ T3641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 323.840545][ T3641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 323.852306][ T3641] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 323.868857][ T3641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.880116][ T3641] usb 2-1: config 0 descriptor?? [ 323.883899][ T3760] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.901677][ T8100] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.923312][ T3641] hub 2-1:0.0: USB hub found [ 323.929341][ T8039] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.979942][ T3760] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.065851][ T3760] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.141052][ T3641] hub 2-1:0.0: 2 ports detected [ 324.774625][ T3645] Bluetooth: hci1: command tx timeout [ 324.930648][ T3645] Bluetooth: hci5: command tx timeout [ 325.286943][ T8039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 325.302707][ T8039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 325.312217][ T8039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 325.328311][ T8039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 325.351230][ T3760] device hsr_slave_0 left promiscuous mode [ 325.358146][ T3760] device hsr_slave_1 left promiscuous mode [ 325.366026][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.374477][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.382652][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.390099][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.397945][ T3760] device bridge_slave_1 left promiscuous mode [ 325.405227][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.414291][ T3760] device bridge_slave_0 left promiscuous mode [ 325.420559][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.433753][ T3760] device hsr_slave_0 left promiscuous mode [ 325.440299][ T3760] device hsr_slave_1 left promiscuous mode [ 325.447018][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.454633][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.463852][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.471504][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.479059][ T3760] device bridge_slave_0 left promiscuous mode [ 325.485637][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.532096][ T3760] device veth1_macvtap left promiscuous mode [ 325.538112][ T3760] device veth0_macvtap left promiscuous mode [ 325.544319][ T3760] device veth1_vlan left promiscuous mode [ 325.550091][ T3760] device veth0_vlan left promiscuous mode [ 325.559361][ T3760] device veth1_macvtap left promiscuous mode [ 325.565514][ T3760] device veth0_macvtap left promiscuous mode [ 325.571849][ T3760] device veth1_vlan left promiscuous mode [ 325.577619][ T3760] device veth0_vlan left promiscuous mode [ 326.098436][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 326.145146][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 326.188349][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.234746][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.431639][ T3641] usb 2-1: USB disconnect, device number 9 [ 326.679633][ T3760] bond0 (unregistering): Released all slaves [ 326.861719][ T3645] Bluetooth: hci1: command tx timeout [ 327.020709][ T3634] Bluetooth: hci5: command tx timeout [ 327.101729][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 327.142798][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 327.184656][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.227703][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.678215][ T3760] bond0 (unregistering): Released all slaves [ 327.839538][ T8036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.848886][ T8036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.860427][ T8036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.875281][ T8036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.956235][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.983246][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.991819][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.023037][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.039396][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.049640][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.068722][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.077373][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.084480][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.106865][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.114575][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.123588][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.133350][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.143242][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.150333][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.159641][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.170214][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.179016][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.186884][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.197934][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.207558][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.237147][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.245627][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.255222][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.266224][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.273379][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.283386][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.292219][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.300600][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.307691][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.315443][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.324147][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.336896][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.378416][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.388555][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.397534][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.406969][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.415723][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.435504][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.444192][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.452736][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.463064][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.472348][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.482629][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.491439][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.499674][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.509819][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.518501][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.528691][ T8039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.545194][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.790286][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.827648][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.835771][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.913604][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.923650][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.940910][ T3634] Bluetooth: hci1: command tx timeout [ 328.946456][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.988155][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.005042][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.033159][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.051262][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.064301][ T8036] device veth0_vlan entered promiscuous mode [ 329.081777][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.090877][ T3634] Bluetooth: hci5: command tx timeout [ 329.092079][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.126715][ T8036] device veth1_vlan entered promiscuous mode [ 329.198109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.211654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 329.242067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.261683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.272830][ T8036] device veth0_macvtap entered promiscuous mode [ 329.294508][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.303541][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.313214][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.333871][ T8036] device veth1_macvtap entered promiscuous mode [ 329.342372][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.351282][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.359524][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.372435][ T8039] device veth0_vlan entered promiscuous mode [ 329.389443][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.409685][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.428862][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.439380][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.456892][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.468450][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.486997][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.499596][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.519272][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.528958][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.543506][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.558959][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.567986][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.594975][ T8039] device veth1_vlan entered promiscuous mode [ 329.606150][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.617891][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.630118][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.640797][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.651222][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.661915][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.672203][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.682873][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.692915][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.711884][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.733526][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.757615][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.768650][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.782408][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.803818][ T8036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.830584][ T8036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.839310][ T8036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.860596][ T8036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.879839][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.900189][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.942241][ T8039] device veth0_macvtap entered promiscuous mode [ 329.993182][ T8039] device veth1_macvtap entered promiscuous mode [ 330.028411][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.039199][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.049718][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.068279][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.078607][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.090396][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.100457][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.111005][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.121450][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.132049][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.143470][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.165724][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.175104][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.183984][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.192970][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.214970][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.225918][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.236072][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.246663][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.256749][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.267461][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.277992][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.288673][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.299396][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.310274][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.321191][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.332041][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.343054][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.356923][ T8039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.365938][ T8039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.375175][ T8039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.384360][ T8039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.398558][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.408520][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.428263][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.436877][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.483770][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.530268][ T7891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.556903][ T7891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.558264][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.582962][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.591317][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.605062][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.654704][ T7839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.686603][ T7839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.708152][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.711100][ T8127] loop3: detected capacity change from 0 to 64 [ 330.742063][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 330.802995][ T8130] fuse: Unknown parameter '"0x000000000000000a' [ 330.861853][ T8127] loop3: detected capacity change from 64 to 0 [ 330.905462][ T7690] MINIX-fs: deleted inode referenced: 2 [ 330.912622][ T7690] MINIX-fs: deleted inode referenced: 2 [ 330.919138][ T8140] loop2: detected capacity change from 0 to 128 [ 330.921125][ T7690] MINIX-fs: deleted inode referenced: 2 [ 330.934129][ T7690] MINIX-fs: deleted inode referenced: 2 [ 330.943723][ T8140] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 331.011181][ T8140] loop2: detected capacity change from 128 to 0 [ 331.080325][ T8036] sysv_free_block: trying to free block not in datazone [ 331.089426][ T8036] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 331.108849][ T8147] Process accounting resumed [ 331.173133][ T3634] Bluetooth: hci5: command tx timeout [ 331.364786][ T3695] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.501263][ T3695] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.609224][ T3695] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.793533][ T3695] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.862940][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 331.893076][ T8164] fuse: Unknown parameter '"0x000000000000000a' [ 332.135984][ T3645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.148290][ T3645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.161536][ T3645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.172003][ T3645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.182516][ T3645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.189989][ T3645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.848035][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 332.960979][ T8166] loop4: detected capacity change from 0 to 32768 [ 332.999193][ T8166] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1160 (8166) [ 333.108142][ T8166] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 333.170970][ T8166] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 333.179796][ T8166] BTRFS info (device loop4): enabling auto defrag [ 333.198109][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.207614][ T8166] BTRFS info (device loop4): doing ref verification [ 333.208499][ T8186] loop0: detected capacity change from 0 to 4096 [ 333.221553][ T8166] BTRFS info (device loop4): max_inline at 0 [ 333.227689][ T8166] BTRFS info (device loop4): force clearing of disk cache [ 333.235665][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.243204][ T8166] BTRFS info (device loop4): turning on sync discard [ 333.258962][ T8173] device bridge_slave_0 entered promiscuous mode [ 333.260855][ T8186] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 333.266819][ T8166] BTRFS info (device loop4): disabling free space tree [ 333.324219][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.359410][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.413448][ T8173] device bridge_slave_1 entered promiscuous mode [ 333.478375][ T8166] BTRFS info (device loop4): enabling ssd optimizations [ 333.491957][ T8166] BTRFS info (device loop4): rebuilding free space tree [ 333.542900][ T8166] BTRFS info (device loop4): disabling free space tree [ 333.549843][ T8166] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 333.627152][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.636714][ T8166] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 333.844108][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.969627][ T3695] device hsr_slave_0 left promiscuous mode [ 334.035112][ T3695] device hsr_slave_1 left promiscuous mode [ 334.072281][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.079719][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.128127][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.159672][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.210806][ T3645] Bluetooth: hci0: command tx timeout [ 334.220368][ T3695] device bridge_slave_1 left promiscuous mode [ 334.248563][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.302307][ T3695] device bridge_slave_0 left promiscuous mode [ 334.308543][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.324855][ T8039] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 334.349290][ T8217] loop2: detected capacity change from 0 to 128 [ 334.391606][ T8217] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 334.408308][ T8217] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 334.514256][ T26] audit: type=1804 audit(1724098694.747:70): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1167" name="/newroot/8/file0/bus" dev="loop2" ino=13 res=1 errno=0 [ 334.586213][ T3695] device veth1_macvtap left promiscuous mode [ 334.595885][ T3695] device veth0_macvtap left promiscuous mode [ 334.608784][ T3695] device veth1_vlan left promiscuous mode [ 334.620084][ T3695] device veth0_vlan left promiscuous mode [ 335.242081][ T8036] EXT4-fs (loop2): unmounting filesystem. [ 335.494818][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 335.545952][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 335.594060][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.646937][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.243030][ T3695] bond0 (unregistering): Released all slaves [ 336.290718][ T3645] Bluetooth: hci0: command tx timeout [ 336.383136][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 336.431134][ T8173] team0: Port device team_slave_0 added [ 336.437190][ T8235] fuse: Unknown parameter '"0x000000000000000b' [ 336.444095][ T8173] team0: Port device team_slave_1 added [ 336.531667][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.538680][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.649666][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.711719][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.759611][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.863163][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.024640][ T8173] device hsr_slave_0 entered promiscuous mode [ 337.035747][ T8173] device hsr_slave_1 entered promiscuous mode [ 337.886500][ T8173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.930286][ T8173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.980903][ T8173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.024768][ T8173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 338.221634][ T8250] loop4: detected capacity change from 0 to 4096 [ 338.245874][ T8250] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 338.265227][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.294710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.305231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.345286][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.370837][ T3645] Bluetooth: hci0: command tx timeout [ 338.394774][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.421318][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.451598][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.458730][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.511690][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.561005][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.608142][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.641177][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.648290][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.703849][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.749299][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.802665][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.840874][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.870995][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.892628][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.921004][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.951197][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.971712][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.006328][ T8173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.043469][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.072673][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.098811][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.183387][ T8261] loop4: detected capacity change from 0 to 2048 [ 339.195553][ T8252] loop0: detected capacity change from 0 to 32768 [ 339.211210][ T8261] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 339.235034][ T8252] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1178 (8252) [ 339.262121][ T8261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.287042][ T8252] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 339.320845][ T8252] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 339.354640][ T8252] BTRFS info (device loop0): enabling auto defrag [ 339.361533][ T8252] BTRFS info (device loop0): doing ref verification [ 339.385616][ T8252] BTRFS info (device loop0): max_inline at 0 [ 339.390299][ T8249] loop2: detected capacity change from 0 to 40427 [ 339.395260][ T8252] BTRFS info (device loop0): force clearing of disk cache [ 339.415919][ T8249] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 339.421981][ T8252] BTRFS info (device loop0): turning on sync discard [ 339.434110][ T8249] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 339.439291][ T8252] BTRFS info (device loop0): disabling free space tree [ 339.466647][ T8249] F2FS-fs (loop2): invalid crc value [ 339.527249][ T8249] F2FS-fs (loop2): Found nat_bits in checkpoint [ 339.609317][ T8257] loop1: detected capacity change from 0 to 32768 [ 339.632973][ T8249] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 339.641858][ T8249] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 339.689174][ T8252] BTRFS info (device loop0): enabling ssd optimizations [ 339.708023][ T8252] BTRFS info (device loop0): rebuilding free space tree [ 339.715400][ T8257] XFS (loop1): Mounting V5 Filesystem [ 339.761241][ T8252] BTRFS info (device loop0): disabling free space tree [ 339.777980][ T8252] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 339.790078][ T8249] syz.2.1177: attempt to access beyond end of device [ 339.790078][ T8249] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 339.795768][ T8252] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 339.899066][ T8294] syz.2.1177: attempt to access beyond end of device [ 339.899066][ T8294] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 339.931592][ T8257] XFS (loop1): Ending clean mount [ 340.086618][ T8036] syz-executor: attempt to access beyond end of device [ 340.086618][ T8036] loop2: rw=2051, sector=45096, nr_sectors = 16 limit=40427 [ 340.125873][ T8036] F2FS-fs (loop2): Issue discard(5637, 5637, 2) failed, ret: -5 [ 340.162461][ T6616] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 340.204143][ T6616] XFS (loop1): Unmount and run xfs_repair [ 340.211905][ T6616] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 340.213889][ T7877] XFS (loop1): Unmounting Filesystem [ 340.219349][ T6616] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 340.233911][ T6616] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 340.234278][ T7514] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 340.260573][ T6616] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 340.280376][ T6616] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 340.289508][ T6616] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 340.300006][ T6616] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 340.309495][ T6616] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 340.320184][ T6616] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 340.332078][ T4143] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 340.393366][ T4143] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 340.409700][ T4143] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 340.457425][ T3645] Bluetooth: hci0: command tx timeout [ 341.157073][ T4634] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 341.400726][ T4634] usb 2-1: Using ep0 maxpacket: 8 [ 341.520807][ T4634] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 341.693812][ T4634] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 341.710410][ T4634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.718700][ T4634] usb 2-1: Product: syz [ 341.730291][ T4634] usb 2-1: Manufacturer: syz [ 341.735207][ T4634] usb 2-1: SerialNumber: syz [ 341.751879][ T4634] usb 2-1: config 0 descriptor?? [ 341.792468][ T4634] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 342.706549][ T8312] loop4: detected capacity change from 0 to 128 [ 342.712094][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.722606][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.740076][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.821114][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.851506][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.952861][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.978734][ T8173] device veth0_vlan entered promiscuous mode [ 342.985974][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.000980][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.033142][ T8173] device veth1_vlan entered promiscuous mode [ 343.052478][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.062945][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.074354][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.093234][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 343.113442][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.123223][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.134140][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.154253][ T8173] device veth0_macvtap entered promiscuous mode [ 343.176354][ T8326] binder: transaction release 59 bad object at offset 167772160, size 80 [ 343.184537][ T8173] device veth1_macvtap entered promiscuous mode [ 343.208975][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.220977][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.231284][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.242230][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.279250][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.284018][ T8329] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1193'. [ 343.298009][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.299221][ T8330] loop2: detected capacity change from 0 to 256 [ 343.309860][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.318760][ T8329] unsupported nlmsg_type 40 [ 343.341800][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.351968][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.362705][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.375778][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.424402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 343.437932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 343.461676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 343.475111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.491769][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.503741][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.519288][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.532297][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.548124][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.559050][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.569468][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.581928][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.598192][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.609046][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.619310][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.632049][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.643212][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.652496][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.661922][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.671821][ T8339] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 343.679676][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1197'. [ 343.693715][ T8173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.714124][ T8173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.726883][ T8173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.736769][ T8173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.849689][ T7839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.873528][ T7839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.881918][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.890079][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.905800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.927905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.949247][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 343.990817][ T4634] gspca_zc3xx: reg_r err -71 [ 344.100886][ T3945] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 344.522312][ T3945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.535239][ T3945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.545566][ T3945] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 344.556464][ T3945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.568082][ T3945] usb 1-1: config 0 descriptor?? [ 344.615755][ T4634] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 344.630723][ T4634] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 344.638610][ T4634] usb 2-1: USB disconnect, device number 10 [ 345.036951][ T3945] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 345.390024][ T8386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.528707][ T4634] usb 1-1: USB disconnect, device number 8 [ 346.718093][ T8392] loop3: detected capacity change from 0 to 512 [ 346.766130][ T8392] EXT4-fs (loop3): 1 truncate cleaned up [ 346.780828][ T8392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 346.800807][ T4140] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 346.954561][ T8173] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 347.004945][ T8173] EXT4-fs error (device loop3): ext4_lookup:1856: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 347.057087][ T8173] EXT4-fs error (device loop3): ext4_lookup:1856: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 347.190891][ T4140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.201977][ T4140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.233467][ T4140] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 347.250576][ T4140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.264676][ T8385] loop4: detected capacity change from 0 to 32768 [ 347.267851][ T4140] usb 3-1: config 0 descriptor?? [ 347.344621][ T8385] XFS (loop4): Mounting V5 Filesystem [ 347.409015][ T8385] XFS (loop4): Ending clean mount [ 347.553273][ T8173] EXT4-fs (loop3): unmounting filesystem. [ 347.608301][ T8385] syz.4.1212 (8385) used greatest stack depth: 18336 bytes left [ 347.621797][ T8039] XFS (loop4): Unmounting Filesystem [ 347.760152][ T4140] logitech 0003:046D:CA04.0008: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 347.781850][ T4140] logitech 0003:046D:CA04.0008: no inputs found [ 347.858429][ T7891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.956369][ T4349] usb 3-1: USB disconnect, device number 13 [ 348.067621][ T7891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.209598][ T7891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.342260][ T7891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.628863][ T3634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.650283][ T3634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.658930][ T3634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.670097][ T3634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.682019][ T3634] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 348.689358][ T3634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.508740][ T8423] loop1: detected capacity change from 0 to 32768 [ 349.530649][ T8423] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1223 (8423) [ 349.590400][ T8423] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 349.620759][ T8423] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 349.629441][ T8423] BTRFS info (device loop1): using free space tree [ 349.708927][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 349.766151][ T8453] fuse: Unknown parameter '"0x000000000000000b00000000000000000000' [ 349.957869][ T8423] BTRFS info (device loop1): enabling ssd optimizations [ 350.465478][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 350.845709][ T3645] Bluetooth: hci0: command tx timeout [ 350.882351][ T8427] loop4: detected capacity change from 0 to 65536 [ 350.915450][ T8440] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 350.943759][ T8427] XFS (loop4): Mounting V5 Filesystem [ 350.963521][ T8480] loop2: detected capacity change from 0 to 1024 [ 351.051478][ T7877] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.060680][ T8427] XFS (loop4): Ending clean mount [ 351.061953][ T8480] hfsplus: failed to load extents file [ 351.069197][ T8427] XFS (loop4): Quotacheck needed: Please wait. [ 351.126562][ T8427] XFS (loop4): Quotacheck: Done. [ 351.237980][ T8480] loop2: detected capacity change from 0 to 256 [ 351.417623][ T8039] XFS (loop4): Unmounting Filesystem [ 351.477858][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.523783][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.580836][ T8431] device bridge_slave_0 entered promiscuous mode [ 351.638409][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.656607][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.690702][ T8431] device bridge_slave_1 entered promiscuous mode [ 351.927610][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.964601][ T7891] device hsr_slave_0 left promiscuous mode [ 351.977241][ T7891] device hsr_slave_1 left promiscuous mode [ 352.021416][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.029647][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.046374][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.069697][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.088995][ T7891] device bridge_slave_1 left promiscuous mode [ 352.099383][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.118273][ T7891] device bridge_slave_0 left promiscuous mode [ 352.129805][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.199326][ T7891] device veth1_macvtap left promiscuous mode [ 352.208726][ T7891] device veth0_macvtap left promiscuous mode [ 352.221350][ T7891] device veth1_vlan left promiscuous mode [ 352.237349][ T7891] device veth0_vlan left promiscuous mode [ 352.243330][ T4140] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 352.501446][ T4140] usb 3-1: Using ep0 maxpacket: 16 [ 352.599987][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 352.673258][ T4140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.686816][ T4140] usb 3-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 352.702143][ T8515] fuse: Unknown parameter '"0x000000000000000b00000000000000000000' [ 352.711366][ T4140] usb 3-1: config 0 interface 0 has no altsetting 0 [ 352.887587][ T4140] usb 3-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 352.908520][ T4140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.926554][ T4140] usb 3-1: Product: syz [ 352.930792][ T3645] Bluetooth: hci0: command tx timeout [ 352.938693][ T4140] usb 3-1: Manufacturer: syz [ 352.949225][ T4140] usb 3-1: SerialNumber: syz [ 352.981381][ T4140] usb 3-1: config 0 descriptor?? [ 353.064002][ T4140] sierra 3-1:0.0: Sierra USB modem converter detected [ 353.204079][ T7891] team0 (unregistering): Port device team_slave_1 removed [ 353.252524][ T7891] team0 (unregistering): Port device team_slave_0 removed [ 353.339713][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.412091][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.542567][ T4140] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 353.560075][ T4140] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 353.572307][ T4140] usb 3-1: USB disconnect, device number 14 [ 353.590812][ T4140] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 353.608940][ T4140] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 353.626582][ T4140] sierra 3-1:0.0: device disconnected [ 353.942599][ T7891] bond0 (unregistering): Released all slaves [ 354.035766][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.135687][ T8519] loop0: detected capacity change from 0 to 1024 [ 354.221963][ T8431] team0: Port device team_slave_0 added [ 354.242897][ T8431] team0: Port device team_slave_1 added [ 354.292393][ T8519] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1242'. [ 354.334405][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.336687][ T8523] loop1: detected capacity change from 0 to 4096 [ 354.367136][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.396594][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.423253][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.430252][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.490765][ T3945] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 354.494269][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.564306][ T8431] device hsr_slave_0 entered promiscuous mode [ 354.581341][ T8431] device hsr_slave_1 entered promiscuous mode [ 354.740676][ T3945] usb 3-1: Using ep0 maxpacket: 16 [ 355.012558][ T3634] Bluetooth: hci0: command tx timeout [ 355.381140][ T8529] loop0: detected capacity change from 0 to 4096 [ 355.400702][ T3945] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.403735][ T8529] ntfs: (device loop0): ntfs_read_inode_mount(): $MFT must be non-resident but a resident extent was found. $MFT is corrupt. Run chkdsk. [ 355.439458][ T8529] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 355.511532][ T3945] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.521375][ T3945] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.541620][ T3945] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 355.552966][ T3945] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.563135][ T3945] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 355.616902][ T8529] loop0: detected capacity change from 0 to 512 [ 355.680265][ T8529] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2766: inode #12: comm syz.0.1247: corrupted xattr block 142 [ 355.736268][ T8529] EXT4-fs (loop0): Remounting filesystem read-only [ 355.747863][ T8529] EXT4-fs (loop0): 1 truncate cleaned up [ 355.756085][ T8529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 356.197512][ T7514] EXT4-fs (loop0): unmounting filesystem. [ 356.480624][ T3945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.489979][ T3945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.509060][ T8542] loop0: detected capacity change from 0 to 1024 [ 356.515564][ T3945] usb 3-1: Product: syz [ 356.519738][ T3945] usb 3-1: Manufacturer: syz [ 356.532396][ T3945] usb 3-1: SerialNumber: syz [ 356.561101][ T8542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.605523][ T8431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.636935][ T8542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 356.650058][ T8431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.662866][ T8431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.689917][ T8431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.810957][ T3945] cdc_ncm 3-1:1.0: bind() failure [ 356.827805][ T3945] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 356.863768][ T3945] cdc_ncm 3-1:1.1: bind() failure [ 356.881313][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.896845][ T3945] usb 3-1: USB disconnect, device number 15 [ 356.915037][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.923190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.942421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.030768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.049538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.069357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.076604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.090628][ T3634] Bluetooth: hci0: command tx timeout [ 357.099518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.111914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.130649][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.137732][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.170919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.179510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.203588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.213289][ T7514] EXT4-fs (loop0): unmounting filesystem. [ 357.242033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.291501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.327229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.355023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.385342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.414131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.434414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.454156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.483654][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.501023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.869932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.901108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.915068][ T8563] loop2: detected capacity change from 0 to 512 [ 357.930941][ T3645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.940269][ T3645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.949115][ T3645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.957767][ T3645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.977301][ T3645] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 357.992719][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.000465][ T3645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.025684][ T8563] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 358.041289][ T8563] EXT4-fs (loop2): invalid journal inode [ 358.052521][ T8563] EXT4-fs (loop2): can't get journal size [ 358.108233][ T7891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.165847][ T8563] EXT4-fs (loop2): 1 truncate cleaned up [ 358.187545][ T7891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.188208][ T8563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 358.208864][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.235317][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.292338][ T7891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.309977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.333978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.345769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.352664][ T8036] EXT4-fs (loop2): unmounting filesystem. [ 358.353800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.382673][ T8431] device veth0_vlan entered promiscuous mode [ 358.423542][ T7891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.462748][ T8431] device veth1_vlan entered promiscuous mode [ 358.541378][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 358.572441][ T8576] fuse: Unknown parameter '"0x000000000000000b' [ 358.593648][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 358.647192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.661729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.670061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.683741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.695376][ T8431] device veth0_macvtap entered promiscuous mode [ 358.757268][ T8431] device veth1_macvtap entered promiscuous mode [ 358.790687][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.798015][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.814149][ T8564] device bridge_slave_0 entered promiscuous mode [ 358.825011][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.847613][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.858045][ T8564] device bridge_slave_1 entered promiscuous mode [ 358.874074][ T7891] tipc: Left network mode [ 358.899164][ T8587] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 358.916516][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.927832][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.939399][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.949948][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.960868][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.972130][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.982566][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.994304][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.011659][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.023727][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.042909][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.072504][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.136108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.152685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.171103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.190329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.212107][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.233221][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.244193][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.257271][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.275709][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.290423][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.307173][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.327781][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.348522][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.361253][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.406716][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.429591][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.450274][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.461484][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.518014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.528837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.554444][ T8431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.584377][ T8431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.609385][ T8431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.639578][ T8431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.821124][ T8564] team0: Port device team_slave_0 added [ 359.840344][ T8564] team0: Port device team_slave_1 added [ 359.951333][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.959504][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.994361][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.050913][ T3645] Bluetooth: hci6: command tx timeout [ 360.093750][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.121129][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.166620][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.228449][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.250122][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.307604][ T8564] device hsr_slave_0 entered promiscuous mode [ 360.314726][ T8564] device hsr_slave_1 entered promiscuous mode [ 360.323825][ T8564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.331475][ T8564] Cannot create hsr debugfs directory [ 360.341432][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.388359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.398622][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.441315][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.827945][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 360.858710][ T8611] fuse: Unknown parameter '"0x000000000000000b' [ 360.912414][ T7891] device hsr_slave_0 left promiscuous mode [ 360.922452][ T7891] device hsr_slave_1 left promiscuous mode [ 360.943474][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.955570][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.964761][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.974701][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.983339][ T7891] device bridge_slave_1 left promiscuous mode [ 360.991195][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.025891][ T7891] device bridge_slave_0 left promiscuous mode [ 361.047240][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.096560][ T8615] loop1: detected capacity change from 0 to 512 [ 361.124538][ T7891] device veth1_macvtap left promiscuous mode [ 361.130922][ T7891] device veth0_macvtap left promiscuous mode [ 361.138115][ T7891] device veth1_vlan left promiscuous mode [ 361.145490][ T7891] device veth0_vlan left promiscuous mode [ 361.169599][ T8615] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 361.240294][ T8615] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 361.283502][ T8615] EXT4-fs (loop1): 1 truncate cleaned up [ 361.289261][ T8615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 361.314176][ T7840] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 361.354049][ T7840] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:11: Failed to release dquot type 1 [ 361.374212][ T8615] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3844: comm syz.1.1273: Allocating blocks 50-51 which overlap fs metadata [ 361.418066][ T8615] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 361.439353][ T4143] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 361.474066][ T7877] EXT4-fs (loop1): unmounting filesystem. [ 361.676285][ T8628] loop1: detected capacity change from 0 to 512 [ 361.710690][ T8628] EXT4-fs: Ignoring removed orlov option [ 361.716368][ T8628] EXT4-fs: Ignoring removed i_version option [ 361.880598][ T8628] EXT4-fs (loop1): 1 truncate cleaned up [ 361.910769][ T8628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 362.042881][ T8628] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #12: comm syz.1.1278: No space for directory leaf checksum. Please run e2fsck -D. [ 362.132760][ T3645] Bluetooth: hci6: command tx timeout [ 362.212999][ T8628] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5879: Out of memory [ 362.289238][ T8628] EXT4-fs (loop1): Remounting filesystem read-only [ 362.327212][ T8628] EXT4-fs error (device loop1): __ext4_unlink:3325: inode #12: comm syz.1.1278: mark_inode_dirty error [ 362.469494][ T4143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.481831][ T4143] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.494824][ T4143] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.504065][ T4143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.513959][ T4143] usb 3-1: config 0 descriptor?? [ 362.530186][ T7877] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /33/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 362.806691][ T7891] team0 (unregistering): Port device team_slave_1 removed [ 362.904487][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 362.966515][ T8641] fuse: Unknown parameter '"0x000000000000000b' [ 362.990297][ T7891] team0 (unregistering): Port device team_slave_0 removed [ 363.047257][ T4143] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 363.055582][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.055908][ T3634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.087308][ T3634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.096032][ T3634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.113757][ T3634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.121535][ T3634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 363.133200][ T3634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.155044][ T4143] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 363.174733][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.694110][ T7891] bond0 (unregistering): Released all slaves [ 363.991792][ T4143] usb 3-1: USB disconnect, device number 16 [ 364.043694][ T7877] EXT4-fs (loop1): unmounting filesystem. [ 364.090475][ T8642] chnl_net:caif_netlink_parms(): no params data found [ 364.213105][ T3634] Bluetooth: hci6: command tx timeout [ 364.317624][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.338912][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.347588][ T8642] device bridge_slave_0 entered promiscuous mode [ 364.415423][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.440803][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.481703][ T8642] device bridge_slave_1 entered promiscuous mode [ 364.607090][ T8642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.655597][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.665661][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.689530][ T3645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.703094][ T8642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.729829][ T3645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.737425][ T3645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 364.745628][ T8663] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 364.756733][ T3645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.851876][ T8564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.921409][ T8564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.965187][ T8642] team0: Port device team_slave_0 added [ 364.988508][ T8564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.038174][ T8642] team0: Port device team_slave_1 added [ 365.060168][ T8564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.159526][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.171043][ T3645] Bluetooth: hci3: command tx timeout [ 365.200028][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.226181][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.260719][ T8642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.285415][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.317727][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.343658][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.423479][ T8642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.450456][ T8659] loop3: detected capacity change from 0 to 32768 [ 365.564075][ T8659] XFS (loop3): Mounting V5 Filesystem [ 365.606208][ T8659] XFS (loop3): Ending clean mount [ 365.735395][ T8642] device hsr_slave_0 entered promiscuous mode [ 365.780692][ T8642] device hsr_slave_1 entered promiscuous mode [ 365.792159][ T8642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.806439][ T8642] Cannot create hsr debugfs directory [ 365.869857][ T26] audit: type=1804 audit(1724098726.097:71): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1287" name="/newroot/7/file0/bus" dev="loop3" ino=4425 res=1 errno=0 [ 366.063010][ T8679] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 366.070345][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 366.089958][ T8431] XFS (loop3): Unmounting Filesystem [ 366.126013][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.198931][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.226820][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.239370][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.290728][ T3645] Bluetooth: hci6: command tx timeout [ 366.312070][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.331136][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.341195][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.348337][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.356273][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.376371][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.392558][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.401983][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.409105][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.418188][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.489340][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.498048][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.514175][ T8662] device bridge_slave_0 entered promiscuous mode [ 366.523009][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.530197][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.539148][ T8662] device bridge_slave_1 entered promiscuous mode [ 366.550047][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.580659][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.596333][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.604760][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.632548][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 366.666256][ T7891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.689550][ T8689] fuse: Unknown parameter '"0x000000000000000b' [ 366.702448][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.719534][ T8564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.740732][ T8564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.756316][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.766077][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.775930][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.783895][ T3645] Bluetooth: hci5: command tx timeout [ 366.793973][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 366.801317][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.823914][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.843997][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.862343][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.883170][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.927373][ T7891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.961362][ T8662] team0: Port device team_slave_0 added [ 366.969832][ T8662] team0: Port device team_slave_1 added [ 367.055573][ T7891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.075718][ T8697] loop3: detected capacity change from 0 to 256 [ 367.087910][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.097162][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.110894][ T8697] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 367.132336][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.210097][ T7891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.241858][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.248856][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.251174][ T3645] Bluetooth: hci3: command tx timeout [ 367.290668][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.343438][ T8662] device hsr_slave_0 entered promiscuous mode [ 367.361287][ T8662] device hsr_slave_1 entered promiscuous mode [ 367.369074][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.377032][ T8662] Cannot create hsr debugfs directory [ 367.404291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.412556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.430727][ T4634] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 367.480003][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.568894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.584073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.622614][ T7891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.676403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.686816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.695979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.704333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.745539][ T7891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.760683][ T8564] device veth0_vlan entered promiscuous mode [ 367.771394][ T8564] device veth1_vlan entered promiscuous mode [ 367.790832][ T4634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.804725][ T4634] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.818388][ T8564] device veth0_macvtap entered promiscuous mode [ 367.825556][ T4634] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.835062][ T4634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.844356][ T4634] usb 4-1: config 0 descriptor?? [ 367.877199][ T7891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.893594][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.903938][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.912232][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.921167][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.929847][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.965205][ T7891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.989793][ T8564] device veth1_macvtap entered promiscuous mode [ 368.001667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 368.031247][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.042098][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.052171][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.064314][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.074391][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.084910][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.095690][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.106725][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.116712][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.127276][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.138842][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.151105][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 368.166586][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 368.181594][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.199270][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.209918][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.221328][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.231375][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.241881][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.252162][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.263226][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.273544][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.284865][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.295236][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.305781][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.317619][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.328077][ T4634] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 368.338785][ T8564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.350172][ T4634] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 368.358235][ T8564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.369066][ T4634] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 368.387828][ T8564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.397837][ T8564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.416843][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.430245][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.463340][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 368.589114][ T7840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.624902][ T7840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.680780][ T7840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.681595][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.688915][ T7840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.697341][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 368.746903][ T8711] fuse: Unknown parameter '"0x000000000000000b' [ 368.808020][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.851535][ T3645] Bluetooth: hci5: command tx timeout [ 368.887982][ T8713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.930336][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1301'. [ 368.957433][ T8713] device bridge_slave_1 left promiscuous mode [ 368.974203][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.994319][ T8713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.071758][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 369.085989][ T8719] fuse: Unknown parameter '"0x000000000000000b' [ 369.211849][ T4143] usb 4-1: USB disconnect, device number 5 [ 369.283229][ T8642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.295240][ T8642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.315236][ T8642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.339652][ T3645] Bluetooth: hci3: command tx timeout [ 369.388891][ T8642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.457927][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 369.486098][ T8662] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.497711][ T8662] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.507652][ T8662] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.515827][ T8724] fuse: Unknown parameter '"0x000000000000000b' [ 369.517654][ T8662] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.697355][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 369.714821][ T8642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.729993][ T8726] fuse: Unknown parameter '"0x000000000000000b' [ 369.828120][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 369.830142][ T8642] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.859492][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.864158][ T8731] fuse: Unknown parameter '"0x000000000000000b' [ 369.878241][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.955197][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.964826][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.974639][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.981778][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.992436][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 370.007224][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 370.016150][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.041886][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.062887][ T8736] fuse: Unknown parameter '"0x000000000000000b' [ 370.072811][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.093228][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.108707][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.115892][ T7892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.125302][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.138468][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.253817][ T8747] loop2: detected capacity change from 0 to 64 [ 370.282278][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.315316][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.340281][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.382891][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.402492][ T8742] fuse: Unknown parameter '"0x000000000000000b' [ 370.407374][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.445767][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.465384][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.475278][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.484768][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.491901][ T7840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.499866][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.514242][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.528234][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.530221][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.535353][ T7840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.536718][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.568926][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.577623][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.586356][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.606082][ T8642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.618051][ T8642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.675380][ T8760] fuse: Unknown parameter '"0x000000000000000b' [ 370.686824][ T8752] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 370.712496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.735840][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.752624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.790876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.806237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.815393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.824883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.837463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.850432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.858934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.902822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.911082][ T8763] fuse: Unknown parameter '"0x000000000000000b' [ 370.912142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.927894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.931729][ T3645] Bluetooth: hci5: command tx timeout [ 370.936903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.951439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.959879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.985370][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.036481][ T8765] fuse: Unknown parameter '"0x000000000000000b' [ 371.182433][ T7891] device hsr_slave_0 left promiscuous mode [ 371.200745][ T7891] device hsr_slave_1 left promiscuous mode [ 371.217841][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.237032][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.262551][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.289558][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.297479][ T7891] device bridge_slave_1 left promiscuous mode [ 371.304012][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.312853][ T7891] device bridge_slave_0 left promiscuous mode [ 371.319004][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.332972][ T7891] device hsr_slave_0 left promiscuous mode [ 371.339354][ T7891] device hsr_slave_1 left promiscuous mode [ 371.346032][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.353698][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.361311][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.369004][ T7891] device bridge_slave_1 left promiscuous mode [ 371.375468][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.394195][ T7891] device bridge_slave_0 left promiscuous mode [ 371.405450][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.419289][ T3645] Bluetooth: hci3: command tx timeout [ 371.469702][ T7891] device veth1_macvtap left promiscuous mode [ 371.477084][ T7891] device veth0_macvtap left promiscuous mode [ 371.485471][ T7891] device veth1_vlan left promiscuous mode [ 371.495671][ T7891] device veth0_vlan left promiscuous mode [ 371.504999][ T7891] device veth1_macvtap left promiscuous mode [ 371.511281][ T7891] device veth0_macvtap left promiscuous mode [ 371.517319][ T7891] device veth1_vlan left promiscuous mode [ 371.523281][ T3680] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 371.530756][ T7891] device veth0_vlan left promiscuous mode [ 371.632269][ T8784] fuse: Unknown parameter '"0x000000000000000b' [ 371.940739][ T3680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.951224][ T3680] usb 1-1: config 0 has no interfaces? [ 371.956856][ T3680] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 371.966841][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.981712][ T3680] usb 1-1: config 0 descriptor?? [ 372.118995][ T7891] team0 (unregistering): Port device team_slave_1 removed [ 372.166548][ T7891] team0 (unregistering): Port device team_slave_0 removed [ 372.211428][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.263263][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.270223][ T3945] usb 1-1: USB disconnect, device number 9 [ 372.762077][ T7891] bond0 (unregistering): Released all slaves [ 373.010708][ T3645] Bluetooth: hci5: command tx timeout [ 373.380253][ T7891] team0 (unregistering): Port device team_slave_1 removed [ 373.451952][ T7891] team0 (unregistering): Port device team_slave_0 removed [ 373.502647][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.569365][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.459621][ T7891] bond0 (unregistering): Released all slaves [ 374.583868][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.620780][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.641876][ T8642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.801910][ T8793] __nla_validate_parse: 7 callbacks suppressed [ 374.801930][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 374.909129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.920867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.932465][ T8797] fuse: Unknown parameter '"0x000000000000000b' [ 374.954794][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.465934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.539085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.583446][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 375.653987][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.671437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.720763][ T8802] fuse: Unknown parameter '"0x000000000000000b' [ 375.728694][ T8662] device veth0_vlan entered promiscuous mode [ 375.754192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.774924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.795425][ T8662] device veth1_vlan entered promiscuous mode [ 375.818610][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 375.868029][ T8806] fuse: Unknown parameter '"0x000000000000000b' [ 375.887562][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.921395][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.956157][ T8662] device veth0_macvtap entered promiscuous mode [ 375.977444][ T8662] device veth1_macvtap entered promiscuous mode [ 375.986312][ T8809] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.020962][ T8809] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.029984][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.063095][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.082069][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.094100][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.106962][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.120145][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.135954][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.149618][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.164964][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.189275][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.207335][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.226528][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.233240][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 376.261115][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 376.269956][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 376.287033][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 376.287785][ T8813] fuse: Unknown parameter '"0x000000000000000b' [ 376.300711][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.312735][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.323974][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.342593][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.360342][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.378848][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.389420][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.411246][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.430232][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.440117][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.459294][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.479794][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.487268][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.500831][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.523184][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.545499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.555709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.565781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.603016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.627438][ T8662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.642126][ T8662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.660000][ T8662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.669371][ T8662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.683865][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.687943][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.725971][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.751522][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.759738][ T8812] netlink: 'syz.3.1328': attribute type 28 has an invalid length. [ 376.806230][ T8642] device veth0_vlan entered promiscuous mode [ 376.827190][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 376.841304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.849806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.861967][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.869832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.890095][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.899703][ T8642] device veth1_vlan entered promiscuous mode [ 377.022008][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.048209][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.048835][ T8642] device veth0_macvtap entered promiscuous mode [ 377.087513][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.121254][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 377.131306][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.150032][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.159613][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 377.179018][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.195307][ T8642] device veth1_macvtap entered promiscuous mode [ 377.233165][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 377.245888][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.265521][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.286343][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.316679][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.345902][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.368704][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.389210][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.411921][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.435061][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.457708][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.477498][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.537617][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.556608][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.575970][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.621963][ T8642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.641492][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.672279][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 377.680181][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.705219][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.761751][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.793333][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.826728][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 377.830830][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.866609][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.897686][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.917384][ T8833] fuse: Unknown parameter '"0x000000000000000b' [ 377.940575][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.947473][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 377.962879][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.997544][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.012881][ T8836] fuse: Unknown parameter '"0x000000000000000b00000000000000000000' [ 378.026659][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.065578][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.093022][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.126193][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.152044][ T8642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.177333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 378.232110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 378.263796][ T8642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.294033][ T8642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.330325][ T8642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.362768][ T8642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.384753][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 378.417031][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 378.423600][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 378.431479][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 378.439334][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 378.447205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 378.455093][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 378.463042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 378.470929][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 378.478745][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 378.484030][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.486633][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 378.492876][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.500593][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 378.566234][ T8847] loop3: detected capacity change from 0 to 512 [ 378.731160][ T8847] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 378.752452][ T8847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 378.794815][ T8847] System zones: 0-1, 15-15, 18-18, 34-34 [ 378.816923][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 378.852815][ T8847] EXT4-fs (loop3): orphan cleanup on readonly fs [ 378.900365][ T8847] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 378.960752][ T8847] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 378.977310][ T8850] fuse: Unknown parameter '"0x000000000000000b' [ 379.015011][ T8855] fuse: Unknown parameter '"0x000000000000000b' [ 379.041314][ T6433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.049671][ T6433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.078141][ T8847] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 379.103445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.119827][ T8847] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.1335: bad orphan inode 16 [ 379.122757][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.157842][ T8847] ext4_test_bit(bit=15, block=18) = 1 [ 379.190627][ T8847] is_bad_inode(inode)=0 [ 379.196534][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.201222][ T8847] NEXT_ORPHAN(inode)=0 [ 379.207951][ T8847] max_ino=32 [ 379.238404][ T8847] i_nlink=2 [ 379.248465][ T8847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.269864][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 379.298682][ T8841] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 379.306088][ T8858] fuse: Unknown parameter '"0x000000000000000b' [ 379.361838][ T8862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.445731][ T8862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.456577][ T8431] EXT4-fs (loop3): unmounting filesystem. [ 379.498905][ T8869] loop0: detected capacity change from 0 to 1024 [ 379.575464][ T8869] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.1343: casefold flag without casefold feature [ 379.604811][ T8872] fuse: Unknown parameter '"0x000000000000000b00000000000000000000' [ 379.658003][ T8869] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 379.677858][ T8877] fuse: Unknown parameter '"0x000000000000000b' [ 379.687184][ T8869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 379.790665][ T8879] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 16: comm syz.0.1343: lblock 0 mapped to illegal pblock 16 (length 1) [ 379.908459][ T8564] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 379.924065][ T8564] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 379.940381][ T8564] EXT4-fs error (device loop0): ext4_dirty_inode:6083: inode #2: comm syz-executor: mark_inode_dirty error [ 379.976148][ T8564] EXT4-fs (loop0): unmounting filesystem. [ 380.112510][ T8891] __nla_validate_parse: 6 callbacks suppressed [ 380.112522][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 380.128456][ T41] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 380.144559][ T8891] fuse: Unknown parameter '"0x000000000000000b' [ 380.150049][ T8893] trusted_key: encrypted_key: insufficient parameters specified [ 380.170733][ T3945] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 380.256956][ T8898] loop2: detected capacity change from 0 to 2048 [ 380.274933][ T8898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.590936][ T41] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 380.680046][ T41] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 380.871599][ T41] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.968158][ T3945] usb 2-1: Using ep0 maxpacket: 8 [ 380.977387][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.028691][ T41] usb 4-1: config 0 descriptor?? [ 381.057256][ T6433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.121771][ T3945] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.139894][ T3945] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 381.188331][ T3945] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.190978][ T41] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 381.231086][ T3945] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.252005][ T3945] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.261283][ T3945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.295441][ T6433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.367638][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 381.408712][ T8036] ================================================================== [ 381.416817][ T8036] BUG: KASAN: use-after-free in udf_close_lvid+0x6a4/0x9a0 [ 381.423867][ T8905] fuse: Unknown parameter '"0x000000000000000b00000000000000000000' [ 381.424025][ T8036] Write of size 1 at addr ffff888172e5c060 by task syz-executor/8036 [ 381.440063][ T8036] [ 381.442400][ T8036] CPU: 1 PID: 8036 Comm: syz-executor Not tainted 6.1.106-syzkaller #0 [ 381.450647][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.460713][ T8036] Call Trace: [ 381.464002][ T8036] [ 381.466935][ T8036] dump_stack_lvl+0x1e3/0x2cb [ 381.471629][ T8036] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.477105][ T8036] ? panic+0x764/0x764 [ 381.481193][ T8036] ? _printk+0xd1/0x111 [ 381.485357][ T8036] ? __virt_addr_valid+0x17f/0x530 [ 381.490477][ T8036] ? __virt_addr_valid+0x17f/0x530 [ 381.495604][ T8036] print_report+0x15f/0x4f0 [ 381.500114][ T8036] ? __virt_addr_valid+0x17f/0x530 [ 381.505237][ T8036] ? __virt_addr_valid+0x17f/0x530 [ 381.510359][ T8036] ? __virt_addr_valid+0x45b/0x530 [ 381.515479][ T8036] ? __phys_addr+0xb6/0x170 [ 381.519995][ T8036] ? udf_close_lvid+0x6a4/0x9a0 [ 381.524906][ T8036] kasan_report+0x136/0x160 [ 381.529421][ T8036] ? udf_close_lvid+0x6a4/0x9a0 [ 381.534282][ T8036] udf_close_lvid+0x6a4/0x9a0 [ 381.538972][ T8036] ? udf_open_lvid+0x5a0/0x5a0 [ 381.543744][ T8036] ? iput+0x3f7/0x980 [ 381.547738][ T8036] ? clear_inode+0x150/0x150 [ 381.552338][ T8036] udf_put_super+0xc9/0x160 [ 381.556852][ T8036] ? udf_free_in_core_inode+0x20/0x20 [ 381.562232][ T8036] generic_shutdown_super+0x130/0x340 [ 381.562723][ T3945] usb 2-1: GET_CAPABILITIES returned 0 [ 381.567600][ T8036] kill_block_super+0x7a/0xe0 [ 381.567625][ T8036] deactivate_locked_super+0xa0/0x110 [ 381.582969][ T3945] usbtmc 2-1:16.0: can't read capabilities [ 381.583073][ T8036] cleanup_mnt+0x490/0x520 [ 381.593286][ T8036] ? lockdep_hardirqs_on+0x94/0x130 [ 381.598490][ T8036] task_work_run+0x246/0x300 [ 381.603085][ T8036] ? kasan_quarantine_put+0xd4/0x220 [ 381.608383][ T8036] ? task_work_cancel+0x2e0/0x2e0 [ 381.613422][ T8036] ? kmem_cache_free+0x292/0x510 [ 381.618366][ T8036] ? do_exit+0xa6e/0x26a0 [ 381.622704][ T8036] do_exit+0xa73/0x26a0 [ 381.626873][ T8036] ? put_task_struct+0x80/0x80 [ 381.631648][ T8036] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 381.637634][ T8036] ? print_irqtrace_events+0x210/0x210 [ 381.643100][ T8036] ? _raw_spin_unlock_irq+0x1f/0x40 [ 381.648298][ T8036] ? lockdep_hardirqs_on+0x94/0x130 [ 381.653499][ T8036] do_group_exit+0x202/0x2b0 [ 381.658098][ T8036] __x64_sys_exit_group+0x3b/0x40 [ 381.663128][ T8036] do_syscall_64+0x3b/0xb0 [ 381.667558][ T8036] ? clear_bhb_loop+0x45/0xa0 [ 381.672244][ T8036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.678148][ T8036] RIP: 0033:0x7ff970179e79 [ 381.682555][ T8036] Code: Unable to access opcode bytes at 0x7ff970179e4f. [ 381.689552][ T8036] RSP: 002b:00007ffd6d124998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 381.697953][ T8036] RAX: ffffffffffffffda RBX: 00007ff9701e7826 RCX: 00007ff970179e79 [ 381.705913][ T8036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 381.713869][ T8036] RBP: 0000000000000010 R08: 00007ffd6d122736 R09: 00007ffd6d125c50 [ 381.721829][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6d125c50 [ 381.729786][ T8036] R13: 00007ff9701e77b4 R14: 000055555564e4a8 R15: 00007ffd6d126d10 [ 381.737750][ T8036] [ 381.740754][ T8036] [ 381.743072][ T8036] The buggy address belongs to the physical page: [ 381.749467][ T8036] page:ffffea0005cb9700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x172e5c [ 381.759685][ T8036] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 381.766872][ T8036] raw: 057ff00000000000 ffffea0005cb9708 ffffea0005cb9708 0000000000000000 [ 381.775439][ T8036] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 381.783997][ T8036] page dumped because: kasan: bad access detected [ 381.790393][ T8036] page_owner info is not present (never set?) [ 381.796433][ T8036] [ 381.798737][ T8036] Memory state around the buggy address: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.804344][ T8036] ffff888172e5bf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.812382][ T8036] ffff888172e5bf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.820419][ T8036] >ffff888172e5c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.828456][ T8036] ^ [ 381.835626][ T8036] ffff888172e5c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.843663][ T8036] ffff888172e5c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 381.851700][ T8036] ================================================================== [ 381.877824][ T6433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.889683][ T3837] usb 2-1: USB disconnect, device number 11 [ 381.930404][ T8036] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 381.937613][ T8036] CPU: 1 PID: 8036 Comm: syz-executor Not tainted 6.1.106-syzkaller #0 [ 381.945846][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.955891][ T8036] Call Trace: [ 381.959153][ T8036] [ 381.962067][ T8036] dump_stack_lvl+0x1e3/0x2cb [ 381.966733][ T8036] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.972180][ T8036] ? panic+0x764/0x764 [ 381.976228][ T8036] ? preempt_schedule_common+0xa6/0xd0 [ 381.981679][ T8036] ? vscnprintf+0x59/0x80 [ 381.985998][ T8036] panic+0x318/0x764 [ 381.989878][ T8036] ? check_panic_on_warn+0x1d/0xa0 [ 381.994975][ T8036] ? memcpy_page_flushcache+0xfc/0xfc [ 382.000329][ T8036] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 382.006292][ T8036] ? _raw_spin_unlock+0x40/0x40 [ 382.011124][ T8036] ? print_report+0x4a3/0x4f0 [ 382.015926][ T8036] check_panic_on_warn+0x7e/0xa0 [ 382.020848][ T8036] ? udf_close_lvid+0x6a4/0x9a0 [ 382.025689][ T8036] end_report+0x66/0x110 [ 382.029912][ T8036] kasan_report+0x143/0x160 [ 382.034399][ T8036] ? udf_close_lvid+0x6a4/0x9a0 [ 382.039238][ T8036] udf_close_lvid+0x6a4/0x9a0 [ 382.043902][ T8036] ? udf_open_lvid+0x5a0/0x5a0 [ 382.048650][ T8036] ? iput+0x3f7/0x980 [ 382.052617][ T8036] ? clear_inode+0x150/0x150 [ 382.057191][ T8036] udf_put_super+0xc9/0x160 [ 382.061677][ T8036] ? udf_free_in_core_inode+0x20/0x20 [ 382.067034][ T8036] generic_shutdown_super+0x130/0x340 [ 382.072391][ T8036] kill_block_super+0x7a/0xe0 [ 382.077052][ T8036] deactivate_locked_super+0xa0/0x110 [ 382.082409][ T8036] cleanup_mnt+0x490/0x520 [ 382.086809][ T8036] ? lockdep_hardirqs_on+0x94/0x130 [ 382.091991][ T8036] task_work_run+0x246/0x300 [ 382.096567][ T8036] ? kasan_quarantine_put+0xd4/0x220 [ 382.101837][ T8036] ? task_work_cancel+0x2e0/0x2e0 [ 382.106849][ T8036] ? kmem_cache_free+0x292/0x510 [ 382.111774][ T8036] ? do_exit+0xa6e/0x26a0 [ 382.116092][ T8036] do_exit+0xa73/0x26a0 [ 382.120234][ T8036] ? put_task_struct+0x80/0x80 [ 382.124985][ T8036] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 382.130950][ T8036] ? print_irqtrace_events+0x210/0x210 [ 382.136829][ T8036] ? _raw_spin_unlock_irq+0x1f/0x40 [ 382.142011][ T8036] ? lockdep_hardirqs_on+0x94/0x130 [ 382.147191][ T8036] do_group_exit+0x202/0x2b0 [ 382.151776][ T8036] __x64_sys_exit_group+0x3b/0x40 [ 382.156788][ T8036] do_syscall_64+0x3b/0xb0 [ 382.161191][ T8036] ? clear_bhb_loop+0x45/0xa0 [ 382.165856][ T8036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.171734][ T8036] RIP: 0033:0x7ff970179e79 [ 382.176129][ T8036] Code: Unable to access opcode bytes at 0x7ff970179e4f. [ 382.183126][ T8036] RSP: 002b:00007ffd6d124998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 382.191520][ T8036] RAX: ffffffffffffffda RBX: 00007ff9701e7826 RCX: 00007ff970179e79 [ 382.199471][ T8036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 382.207423][ T8036] RBP: 0000000000000010 R08: 00007ffd6d122736 R09: 00007ffd6d125c50 [ 382.215376][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6d125c50 [ 382.223328][ T8036] R13: 00007ff9701e77b4 R14: 000055555564e4a8 R15: 00007ffd6d126d10 [ 382.231287][ T8036] [ 382.234518][ T8036] Kernel Offset: disabled [ 382.238831][ T8036] Rebooting in 86400 seconds..