last executing test programs: 50.173687549s ago: executing program 1 (id=678): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x10, 0x0, 0x4, 0x1000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xffffffffffffffa9) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000380)="a1961d2c7b0f2aa33466ce1204fe75ed0ed21f619aa6546f63104857520b", &(0x7f00000005c0)="a6ae9a7dc7ed2171bc81649516ba64b1f1a836c5b827e47b3d65e0eaf30aa56599687e897bee5f2cded735665e938d7a29c0416817108b00dfd55b9dfefad7871c35c285b218de81bf748b1ddc7a268ea70644951d82cc8f13034f479c07998c06dc09fcee0a6325"}}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x60, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x20}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x45) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x4002, 0x0) mount(&(0x7f0000001e80), &(0x7f0000000200)='./file0\x00', &(0x7f0000000580)='nfs\x00', 0x4080, &(0x7f0000000700)='\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x6589}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9801600c00f3235004000000f300f01cf66baf80c450f01cbef66bafc0ced440f0dc666b834000f00d066baa100ed", 0x3f}], 0x1, 0x8, &(0x7f0000000480), 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x26, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x40010900) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000c40)={0x1, 0x9}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.55032785s ago: executing program 3 (id=702): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0xe20, @rand_addr=0x64010100}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffff7}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe78a77561ba119e5}]}}}]}, 0x74}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000200000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_control_io(r5, &(0x7f0000000700)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x7, {0x7, 0x0, "b27814d066"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0x20cf01) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sync() ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 23.54544222s ago: executing program 1 (id=685): socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={0x0, r5}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) preadv(r4, 0x0, 0x0, 0x4c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000940)=""/125, 0x7d}], 0x8) write$binfmt_script(r7, &(0x7f0000000780), 0xfea7) 21.828664377s ago: executing program 1 (id=703): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x220000, 0x0) 19.722612079s ago: executing program 1 (id=708): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@i_version}, {@data_err_abort}, {@noload}, {@orlov}, {@nobarrier}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setresuid(0x0, 0x0, 0xee00) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x0, 0x80, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 17.628465344s ago: executing program 1 (id=709): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0bc5310, &(0x7f0000000180)={0x9}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000b000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r6 = dup(r5) write$char_usb(r6, &(0x7f0000000240)="259772bd9402000000000000008c19f3da78ce7f427cb49491881fac78851681a78c8049cbb19337f4077f7ec86308", 0x2f) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r8, 0x107, 0xe, 0x0, 0x209fffff) socket$kcm(0x29, 0x2, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.625416354s ago: executing program 3 (id=711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003b00070100000000040000000300000042ead9463f3928a0150009806d85d2f07ba6f4fcffffff4206620f5cf00000006ff62dbc9be850f1745df94117481b986755335529069331d1a2fd12629e8dd424772891ca3a50393d941ed493c38952070d848b9f3f81366db73ffbce3647e1dd2157d05392dcf76d86b04156c264f80038bbd160f1e7a7f6b4c90fd421ed95136a18f8aa6197fb51781d0e604194"], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioperm(0x0, 0x0, 0x2000007fffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000060c0)={0x1f, 0xb9, @fixed, 0xff}, 0xe) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) 14.734584965s ago: executing program 4 (id=714): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) pwritev2(r2, &(0x7f0000000900)=[{0x0}, {&(0x7f0000002140)}, {0x0}], 0x3, 0xff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffebd) 11.987913331s ago: executing program 2 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) rseq(&(0x7f0000000200), 0x20, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000280)='./control\x00', 0x0) wait4(0xffffffffffffffff, &(0x7f0000000180), 0x1000000, &(0x7f0000000300)) close(r1) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x2}, 0x48}}, 0x0) sendto$packet(r1, &(0x7f00000004c0)="a427cdc06f3643fb748c05f90fa96d347f0c40950a264f1bbac43b1f83b70c51611ba8382cb2d4e577925181001e9c2cee45996bbb4499644423ca981d778a9485e8a9b0cf414b9077a678b1031654a4e0b1b8b51fd7944f1cfebf3f62b6337b0185dcd66c3855c9c11e62", 0x6b, 0x90, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xffeffffffffffff6]}, 0x0, 0x0, 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x1c}}, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa0000000) rmdir(&(0x7f0000000080)='./control\x00') socketpair(0x1e, 0x801, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000000)=@file={0xe8e6005ca50009c5, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x2a}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x11100}, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYBLOB="9f3078c68158a7e7f4a5127edd2999c400af7bb537c2775d2a4d34195a41f3ed87a0debf3c3348526e2e01958a198db10aa0d758744dc24c711ad701353514ad15fe08a44f2ea4d25765990a8051f89ec7a1f206875824ee97a4b63e", @ANYRES8, @ANYRES32=r6, @ANYRES16=r3, @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="130100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b24"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 11.968805299s ago: executing program 4 (id=716): socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x80002, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x8, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x100}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2400000000000000c832b5af79e7a995fe8000000000000000000000000000aa", @ANYBLOB='\x00\x00\x00\x00'], 0xffffffae}}], 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000048001a803c000a80050008"], 0x68}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x200081, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0xdc, 0x0, &(0x7f0000000580)=[@exit_looper, @acquire={0x40046305, 0x2}, @increfs_done, @clear_death={0x400c630f, 0x3}, @exit_looper, @increfs_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/62, 0x3e, 0x0, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/99, 0x63, 0x1, 0x2e}, @flat=@weak_binder={0x77622a85, 0x110a, 0x3}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x1101, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/75, 0x4b, 0x1, 0x7}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0xbe, 0x0, &(0x7f0000000780)="32d17b9f165bb66f806824bc2c234cbd805c5ef3eec97e0ac46526d82607c6fb861ad2a430b0863111d2b50c01ea9122684c8eac346355cb08a05681a6da7293f114fe55857f49d7e17ae4249edbf0925440c347e07854e841590780d6448e28757eb67a17753568856bd485365fc4b004c1dcce1178883ccf990054f9270987cc32472b659b2e295c0c4433042f5b11acb86e8db6e7a737ce390bfba54d666c3d9a1e2ee56c83f69bebca353a903beb8afd92ce1b722da261d7c3df0335"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000002040)=ANY=[@ANYBLOB="01000000000000009d02"]) r7 = gettid() gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) process_vm_writev(r7, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000000940)=""/231, 0xe7}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 11.890858656s ago: executing program 3 (id=717): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='target PCI:'], 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=@unlock_all, 0xb) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="020702000070cb032da464bcedfcdf2bbcea3f52488c5934a3ad0dfcc0c60bdc901e409b9a1a5d135a3d182183c5950b650d84706f90651eea402fd55ec928eeb1439754dd333d084617991f0e0339d88c16342cd141edfb9a1f1c0184d253f68eebe785497a92ededcdae374f0a4f77c1229ec7ee8d66fd8f1d14178d16e435ee009db20f1a3cb68668490d531c569e31179eb746018a3386b7511612ed6c42a9bb1add21d49432b1b33d45d070963c0155f38c33c102e4acc1d740aa88fd6d0b45594e00dd9a3d4f614b8b1793bd"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x208, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000100082505a8a44000018c0e000002240007010a0309050102bb6e42b75e09058202208006008300000000"], &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x0, 0x2, 0xb, 0xff, 0xb}, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) 11.825501075s ago: executing program 1 (id=718): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x0, 0x4000, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23b3b6}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa194f}) sendmmsg$inet(r0, &(0x7f000000ba40)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000980)="93c5e1ad53366f6c2c4d6c6c3fc0e66bfa66788f460a35bcbe73aba0b477cb6850e1a8e76ebc7a1ec6ce4953f006fb8cff8e41b2d45b28b86c1e32f1e650addfe564634ac8daf3eb8a0902b3d8e702bee870", 0x52}, {&(0x7f0000000a00)="8c5d5c4680ce9a9030a916b3abfe092306e798d491cdea9819dce2ff76c859c8d2c644670200f2a2394e825b3815b040594077bd02e7776d0c398e1c330ed19da22e3280b08ad3b062f08034ea14865b9e4f0ff04bdd578e9076e83f4251d35025d641043c75c034a2ca2916ebc2aeea7df80fcb00d4383819e6e17514a532c65fb4c9ea80628ede9e251926e9b80f2beccc92247e8f0e9efadaaabe02344f2b42014ec40d4ab06744df3eb373024ef334b38dc9", 0xb4}, {&(0x7f0000000ac0)="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", 0x46b}], 0x3}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r7, 0x5420, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a3d2139231aea087"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), 0xffffffffffffffff) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r9, 0x605}, 0x14}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r12 = syz_open_pts(r11, 0x0) ioctl$TIOCSTI(r12, 0x5412, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000300)={0xffffff87, 0x0, 0x0, 0x0, 0x0, "d36b00010000f7e2df330000000000000000df"}) socket$inet(0x2, 0x2, 0x0) 10.237715266s ago: executing program 4 (id=720): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x82}]}]}, 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000003c0)}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETSF(r6, 0x5409, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzs279qU1EABvAvNmrVIRmcxOGCi1NI+gQWqSAGBCWDgqDYFqRXChYCOthuLj6Ez9QncewgHGlv6Z+QDg71QvL7Lfng5INzhnvPPRfu+4efdzZ397aH7w6z2umk+yRVjjrp50ZW0jgIALBIjkrJ71JKuX2QO79SSml7RgDAdbP/A8Dysf8DwPKx/wPA8nn95u2L9fF441VVrSb1j+lkOml+m/H17XxKna0M08ufHD8gnGrys+fjjWF1op+f9f5pf386WbncH6WX/vz+qOlXl/s3c/dify293J/fX5vbv5XHjy70B+nl8GN2U2czx93z/vdRVT19OZ7p3zv5HwAAACyCQXVm7vl9MLhqvOn/w/uBmfN1Nw+67a4dAJbV3tdvOx/qeuuLIAjCWWj7zgRct/OLvu2ZAAAAAAAAAAAAAAAAV/kfnxO1vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACY9TcAAP//xBqwEw==") chmod(&(0x7f0000000180)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 10.085886255s ago: executing program 2 (id=722): socket$inet6_udplite(0xa, 0x2, 0x88) 9.705781776s ago: executing program 2 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000340)={0x0, 0x5}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="680000001a000000000000000000000014000000000000000000000000000000000000bad4c9244e01440000803e000000280101a1d8e656b0590d68d0d76a4a4e38207c18b38cea3c9c700be24a70446c454baa6f0421a4707a"], 0x68}], 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d34d8026a2c0000a22807e6489625d1b99f3fc875ed68ad5627e320c4bafcb56589847cbf3383e59b7e52361216145440fcc3fd378cc29c8ba37cd0d6fbb685ef49d68b5259971ca91555be6c54756804a388d5692e459dce06"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1) renameat2(r5, &(0x7f0000000000)='./bus\x00', r6, &(0x7f0000000100)='./file0\x00', 0x2) ioperm(0xf636, 0xff, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff2eb1}}, [0x0, 0x7541, 0x10001, 0x5, 0x40bf, 0x8, 0x476, 0x7, 0x287b, 0x4f, 0xfffffffffffffff4, 0x7, 0x191, 0x0, 0xfe9]}, &(0x7f0000000280)=0x100) 7.777610793s ago: executing program 3 (id=725): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0x4112, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x1a8, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000001000000"], 0x0) 6.864501889s ago: executing program 2 (id=726): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000104010100a1000000000000002204000500010001000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1, 0x1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffff2e}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x350d27364b276d03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.747275325s ago: executing program 3 (id=727): openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc8882, 0x0) r0 = syz_io_uring_setup(0x179d, &(0x7f0000000340)={0x0, 0x4a4e, 0x800, 0x1, 0x1ec}, &(0x7f0000000280), &(0x7f00000003c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) getsockopt(r1, 0x6, 0x2, 0x0, &(0x7f0000002840)) syz_io_uring_setup(0x6028, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x2, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000000)) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040), &(0x7f00000005c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @exit, @alu={0x5, 0x1, 0x1, 0xa, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000000000000033cf397d1000003caa158f8814c29a1af31ba1fe37", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.658518952s ago: executing program 0 (id=728): r0 = socket$unix(0x1, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f000036a000/0x1000)=nil, 0x1000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f00005ac000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, 0x0, 0xc890) sendfile(r5, r6, 0x0, 0xc7) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f00000002c0)=ANY=[], 0x1, 0x67b, &(0x7f0000000640)="$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") r7 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.951433941s ago: executing program 2 (id=729): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e1d64c09a"], 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") r1 = open(0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001c40)={0x0, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0xfffffffffffffffc, {0x5}}, &(0x7f0000000c80)={0x18, 0x0, 0x6}, &(0x7f0000000cc0)={0x18, 0xfffffffffffffffe, 0x1, {0x9}}, &(0x7f0000000d00)={0x18, 0x0, 0x6, {0x80000000}}, &(0x7f0000000d40)={0x28, 0x0, 0x7, {{0x1c000, 0x4, 0x1}}}, &(0x7f0000000d80)={0x60, 0x0, 0x7fff, {{0xc0c, 0xcd, 0x4, 0x1, 0x800, 0x5, 0x57e, 0x8}}}, 0x0, &(0x7f0000000e40)={0x11, 0x0, 0x606, {'\x00'}}, &(0x7f0000000e80)={0x20, 0x0, 0x8}, &(0x7f0000001040)={0x78, 0x0, 0xf, {0x0, 0x101, 0x0, {0x0, 0x1000, 0x1, 0x100000000, 0x6, 0x9, 0xc296, 0x2, 0x0, 0x1000, 0x8, 0x0, 0x0, 0xc, 0x2}}}, &(0x7f00000012c0)={0x90, 0x0, 0x572, {0x2, 0x2, 0x0, 0x0, 0x7fff, 0x3, {0x2, 0x5, 0x0, 0x41, 0xffffffffffffffff, 0x5, 0x5, 0xfffffffe, 0x1000, 0xc000, 0x5, 0x0, 0x0, 0x3ff, 0xe62}}}, &(0x7f0000001380)={0xf8, 0xb, 0x5a, [{0x5, 0x7, 0x9, 0xfff, 'trans=fd,'}, {0x2, 0x1b, 0x5, 0x4, 'wfdno'}, {0x0, 0x9, 0x3, 0x3d8, '--)'}, {0x0, 0xb}, {0x4, 0x8, 0xc, 0xb7f, '){,][.*\\/\\+,'}, {0x6, 0x5, 0x3, 0x95, '9p\x00'}, {0x0, 0x0, 0x6, 0x0, 'logon\x00'}]}, 0x0, &(0x7f0000001b40)={0xa0, 0xffffffffffffffda, 0x0, {{0x1, 0x1, 0xed, 0xffffffffffffff00, 0x5, 0xccef, {0x2, 0x7, 0x6ee7, 0x7cc107d0, 0x0, 0xffffffffffff8000, 0x8000, 0x9, 0x7, 0x4000, 0xc36, 0xee01, 0x0, 0x10001, 0x6347ac5f}}}}, &(0x7f0000001c00)={0x20, 0xfffffffffffffff5, 0x80000000, {0x0, 0x4, 0x4, 0x4}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x40247007, &(0x7f0000000040)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, &(0x7f000000cbc0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x10c, 0x4000000}, 0xc20c0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}]}}) mount(&(0x7f0000000040), &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454ebc957b5831b89b59d703e74497c00"}, 0x48, 0xfffffffffffffffd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 5.772195261s ago: executing program 3 (id=730): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x0, 0x11000000, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x39, 0xfffffffffffffffe, &(0x7f0000000480)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000008000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fffff6b703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000dfff000000000006bb8d8d00"}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000340)={0x9}) sigaltstack(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) socket$can_raw(0x1d, 0x3, 0x1) 5.144602591s ago: executing program 4 (id=731): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getdents64(0xffffffffffffffff, 0x0, 0x2e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = fsopen(0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup2(r7, r6) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7d0f21c09f01f57bb83115dbe569bcc4e3790d9b94f9", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x4e868757) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="0a000000010001", 0x7) pwritev2(r0, &(0x7f00000042c0)=[{&(0x7f0000000140)}], 0x1, 0x7fff, 0x0, 0x0) 4.756516624s ago: executing program 0 (id=732): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e20, @private=0xa010101}, 0x0, 0x0, 0x0, 0x0, 0x596, &(0x7f00000005c0)='syz_tun\x00', 0x7, 0x46, 0x3}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ftruncate(r2, 0x81fd) unlink(&(0x7f0000000180)='./bus\x00') r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000010000000000000c02000000005f5f2e30302e00aa46783bee67d1a3e5569ca6"], &(0x7f0000000280)=""/162, 0x2c, 0xa2, 0x1, 0x2, 0x0, @void, @value}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x47ea, 0x842d, 0x2, 0x800, r0, 0x6, '\x00', 0x0, r3, 0x3, 0x1, 0x5, 0x2, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r5, @ANYBLOB="00000000000000008500000026000000950000000000000063b00125b454614e2d9ecfec5b869659c023b1896b1d55b56fe826ddfff9679763765b6b80fc97ad26be556c8cb3f8a338be6b6e4f70c97e3b9f3f4d36539605c8090594c7a5ea795c131e66e8bc8782c6d35154ff0000003a206f4159bee3b095f2eaa037e99de43c9bad094c71e2dbdf5df58a2c1677b236ebcbec6d6164f6b71e6c76ff7a098b424433efb45117388e582b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) syz_emit_vhci(0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/163, 0xa3, 0x0) 3.689911933s ago: executing program 0 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003b00070100000000040000000300000042ead9463f3928a0150009806d85d2f07ba6f4fcffffff4206620f5cf00000006ff62dbc9be850f1745df94117481b986755335529069331d1a2fd12629e8dd424772891ca3a50393d941ed493c38952070d848b9f3f81366db73ffbce3647e1dd2157d05392dcf76d86b04156c264f80038bbd160f1e7a7f6b4c90fd421ed95136a18f8aa6197fb51781d0e604194"], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioperm(0x0, 0x0, 0x2000007fffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000060c0)={0x1f, 0xb9, @fixed, 0xff}, 0xe) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) pread64(r6, &(0x7f0000000280)=""/4096, 0x1000, 0x0) 2.356526294s ago: executing program 0 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) waitid(0x0, r0, 0x0, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000008090900010073797a30000000000900020073797a32"], 0x78}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) sendmmsg$inet6(r5, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30b68484b2c5f0967bc045f364223f332e0017021cd36885c5b27bf4f23c98d57c26ba1bd89adedae55ba15daa277b571a57962ce9c75c3d726f5528035c54efffe7e8a29b2e8c9c35b19e7c7a54883f023efb20b1549a6bc8255567da4e0167e36cf7aa39dfb5356330f0353455bcdd2f53d1d931db6a95cb2b3262bbe78eb9e64d1bc6e01e8dc956cb1a6e90b709d4e0cb8242c965df", 0x98}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="2c0095deae2ef8cac1b43a5a076066e66475dcce825567809b2932bebc9ddc43ca9591939fcf99301c3fce694b8fc2436d7eeee41b23ad913dc068c35282af8247d346368d7b7d338beb610a8c70b3ab7c46bd7012d62d53b55f8cb50cdecc3bb7e71c26e5fe13ae154785bc58175f7dee3a63059d3cf061b6c77d5b5cfca42196011c7b38603fe62386d18b4c9ec55beec8fc8876b38d446051bd2c161aeb", 0x9f}, {&(0x7f0000000180)="267fee8bac", 0x5}, {&(0x7f00000008c0)="55ec3c0b6fde882da92a86ccf9682c2fad2e725c2fb81dddb84bc66603520e1ee959153381b3b913d660a597fb0b178afcc80c29a6f1fa3f379f22bf0da77598b116a0168c9eeb8321a5d6e69ef094f27d28554f05ed9115f2e94d6cce532850b8db30178992e1815acd5b", 0x6b}, {&(0x7f0000000980)="a0ec6ca0069aa3563485f724dd51748370389882e9c85ca8f0630bb2fb609ddcfa6aece36ddeadaa0ccabe26f65ba279800d5993c6718c666856b18ea1eb37779369c60bb27aa9fbd228b7abfa065b56352ac460152d0d5adc45a21192276ef18211c5f3cde523e1beb6e18b92", 0x6d}], 0x4, &(0x7f0000000a00)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x58}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0xa, @loopback, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="85e020390d3ac64decf4aa4d76f64ae54c4be74c2ffb15a6f72cc8df9633d54efc58d48d3806052c0452af77674b03467cd320d9dd82053a6fcac5cde7be207a384f4cfc80a234b9ea19096e45a487e3a301723963a23ce8c0bf69514cf79313f84d5c642b280cc1680b8cbc84c7eb00b1cad19b0b97407bfad6d93289d4e4575144c6316ff22c4b555b9a1e46a07d10b967fd345fbc99b6f92bcdc3ce6c19600e71aff739006186f67f67e980fdf270d7ef6ed942e02b578a31507a10839029905fad9bfcaf406afcec44", 0xcb}], 0x1, &(0x7f0000000c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x30}}], 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) recvmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0xfffffffe, 0x0, {0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x4}) 1.342555253s ago: executing program 4 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000340)={0x0, 0x5}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="680000001a000000000000000000000014000000000000000000000000000000000000bad4c9244e01440000803e000000280101a1d8e656b0590d68d0d76a4a4e38207c18b38cea3c9c700be24a70446c454baa6f0421a4707a"], 0x68}], 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d34d8026a2c0000a22807e6489625d1b99f3fc875ed68ad5627e320c4bafcb56589847cbf3383e59b7e52361216145440fcc3fd378cc29c8ba37cd0d6fbb685ef49d68b5259971ca91555be6c54756804a388d5692e459dce06"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1) renameat2(r5, &(0x7f0000000000)='./bus\x00', r6, &(0x7f0000000100)='./file0\x00', 0x2) ioperm(0xf636, 0xff, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff2eb1}}, [0x0, 0x7541, 0x10001, 0x5, 0x40bf, 0x8, 0x476, 0x7, 0x287b, 0x4f, 0xfffffffffffffff4, 0x7, 0x191, 0x0, 0xfe9]}, &(0x7f0000000280)=0x100) 1.165782804s ago: executing program 0 (id=736): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x3cf7, {{0x14, 0x4, 0x0, 0x34, 0x50, 0x68, 0x0, 0x40, 0x0, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x6, [{@remote, 0x9}, {@private=0xa010101, 0x7fff}, {@broadcast}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x8, [{@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xd3}]}, @ra={0x94, 0x4}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, r1, 0x1, 0x5}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000180)={r8, 0x3, r6, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 72.733131ms ago: executing program 4 (id=737): r0 = inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000500)="392c35014e6c62452678b949c34f0704e26783d9576d7122d70434d240dd25eda3f49e35fef29faeb63bffb49be7ec34cb7acbde49ed5c435e5e450745ec44dbb68150e7767c3f646c8eb52bcf281bd30dec5b0e2324a2cc132c889b8876017981f0eb360488361d586492b274b527871940069a0b1ab18ec468f4d3443b12f8cf22424ccf7637bf49d9489fed1619c7a1be49cd1b7629f4b06c133dae21ec61580daf10a625044a171add2500b20816e6be452904e2f0448480e91a322c1d9f7c311c284f83aa39e8ec12c44dafc5ed67a60b29e3", &(0x7f0000000600)=""/117}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340), 0xfdb1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r8, &(0x7f00000023c0)={0x2020}, 0x2020) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) ioctl$FIBMAP(r5, 0x40086602, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 8.414359ms ago: executing program 2 (id=738): r0 = open(0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0x40505330, &(0x7f0000000400)={0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7fff, 0x0, 0xfc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x1ac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x42, 0x0, 0xfa, 0x2, 0x2, 0x0, 0x256, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x5, 0x3}}, {0xa, 0x2, [0xffff, 0x6, 0x8000]}}, {{0x1c, 0x1, {0x6, 0x4, 0x400, 0x658, 0x2, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x0, 0x3, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x18, 0x80, 0xf9c, 0x0, 0x0, 0x5, 0x8758, 0x9}}, {0x16, 0x2, [0x9, 0x7966, 0x3, 0x23, 0x4d3, 0x4, 0xff, 0x67e, 0x6]}}, {{0x1c, 0x1, {0x4, 0x89, 0x8001, 0x6, 0x0, 0x80000001, 0x7f, 0x3}}, {0xa, 0x2, [0x9, 0x3dbe, 0x6]}}, {{0x1c, 0x1, {0x6d, 0x3f, 0x7fff, 0x8001, 0x2, 0x9, 0x1, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0xff, 0x0, 0x2, 0x1, 0x5, 0x0, 0x4}}, {0xc, 0x2, [0x1d, 0x9f37, 0x101, 0x5]}}, {{0x1c, 0x1, {0x68, 0x3, 0x9, 0xfff, 0x0, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x800]}}, {{0x1c, 0x1, {0x6, 0x9, 0x3ff, 0x3, 0x2, 0x29, 0x3, 0x7}}, {0x12, 0x2, [0x7ac1, 0x6, 0x80, 0x400, 0x7ff, 0x401, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x7f, 0x2}}]}, 0x1ac}}, 0x0) ioctl$KVM_NMI(r0, 0xae9a) readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/179, 0xb3}], 0x3) syz_emit_vhci(&(0x7f00000027c0)=ANY=[@ANYBLOB="040f04f8007dd7"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x7, 0x7, 0xd, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x877, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0x8a, 0xf}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x0, 0x82}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x7, 0x8}}, @l2cap_conf_rsp={{0x5, 0x9, 0x3f}, {0x7, 0xa9, 0x5, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0xfff8, 0x0, 0x1, 0x8}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x2, 0x6, 0x1, 0x6, 0x4}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x5, 0x0, 0x5, 0x8, 0x9327}}]}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x10, 0x0, 0x3}}]}}, 0x81) 0s ago: executing program 0 (id=739): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000659a8b2d01000020207025000000005ff550d87b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000b0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000180)=""/129, 0x33, 0x81, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5c3000000", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): sim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.214193][ T8241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.224825][ T8241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.259094][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.269622][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.279986][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.291237][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.302568][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.327376][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.338178][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.352191][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.363043][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.374148][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.408556][ T8246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.418626][ T8246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.428373][ T8246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.437520][ T8246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.604343][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.658894][ T8392] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.735933][ T5603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.736231][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.751035][ T5598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.764468][ T5603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.804437][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.823963][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.831117][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.848539][ T5603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.857668][ T5603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.946159][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.980076][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.996840][ T5598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.005483][ T8392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.016570][ T8392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.024209][ T5598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.083875][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.113193][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.120325][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.120364][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.157008][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.164191][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.283765][ T8428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.408491][ T8381] veth0_vlan: entered promiscuous mode [ 449.421685][ T8381] veth1_vlan: entered promiscuous mode [ 449.514000][ T8392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.601462][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.693693][ T8381] veth0_macvtap: entered promiscuous mode [ 449.804961][ T8381] veth1_macvtap: entered promiscuous mode [ 449.832909][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.570953][ T81] Bluetooth: hci5: Frame reassembly failed (-84) [ 450.579107][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.591028][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.602284][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.618839][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.629720][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.643024][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.658779][ T8392] veth0_vlan: entered promiscuous mode [ 451.120568][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.142906][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.184626][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.212816][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.236624][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.254542][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.298363][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.356889][ T8585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.503'. [ 451.760814][ T8381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.785600][ T8381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.797887][ T8381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.816781][ T8381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.865881][ T8392] veth1_vlan: entered promiscuous mode [ 451.964171][ T8392] veth0_macvtap: entered promiscuous mode [ 452.003082][ T8392] veth1_macvtap: entered promiscuous mode [ 452.082255][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.099755][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.119160][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.140508][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.161358][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.178564][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.191505][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.209155][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.219104][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.236137][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.251595][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.303577][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.314959][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.324965][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.335595][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.345482][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.356540][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.366725][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.377499][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.388782][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.406230][ T8428] veth0_vlan: entered promiscuous mode [ 452.417285][ T8392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.426925][ T8392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.436332][ T8392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.445129][ T8392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.457850][ T8591] loop2: detected capacity change from 0 to 32768 [ 452.463630][ T8428] veth1_vlan: entered promiscuous mode [ 452.474340][ T2872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.497691][ T2872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.729159][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 452.729727][ T5249] Bluetooth: hci5: command 0x1003 tx timeout [ 454.213552][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.221574][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.285946][ T8428] veth0_macvtap: entered promiscuous mode [ 454.354890][ T8428] veth1_macvtap: entered promiscuous mode [ 454.367700][ T5603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.397284][ T5603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.526429][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.546821][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.578100][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.622653][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.632824][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.643539][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.653505][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.659994][ T8602] loop2: detected capacity change from 0 to 128 [ 454.664139][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.664161][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.664176][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.666248][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.736583][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.759355][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.769587][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.780188][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.790418][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.801035][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.817571][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.828307][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.838331][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.848983][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.864508][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.887892][ T8428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.896877][ T8428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.905918][ T8428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.915424][ T8428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.180984][ T5284] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 455.204160][ T8602] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.227396][ T8602] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 455.243383][ T8608] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 456.254847][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.265020][ T5284] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 456.320962][ T8246] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.416530][ T8620] loop0: detected capacity change from 0 to 128 [ 456.418721][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.092543][ T8620] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.125386][ T5284] usb 4-1: config 0 descriptor?? [ 457.170081][ T5603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.179253][ T5284] usb 4-1: can't set config #0, error -71 [ 457.191264][ T8620] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 457.199360][ T5603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.227531][ T5284] usb 4-1: USB disconnect, device number 18 [ 457.947028][ T8627] sctp: failed to load transform for md5: -2 [ 458.076278][ T5602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.084344][ T5602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.856737][ T8645] loop1: detected capacity change from 0 to 512 [ 458.976219][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.512'. [ 459.248782][ T8645] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 459.402842][ T8241] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.512729][ T8645] EXT4-fs (loop1): 1 orphan inode deleted [ 459.518728][ T8645] EXT4-fs (loop1): 1 truncate cleaned up [ 459.526645][ T8645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.568394][ T8657] loop0: detected capacity change from 0 to 512 [ 459.710364][ T5284] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 459.835870][ T8645] pimreg: entered allmulticast mode [ 459.850662][ T8645] pimreg: left allmulticast mode [ 460.517636][ T8661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.515'. [ 460.663021][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 460.694790][ T5284] usb 3-1: config index 0 descriptor too short (expected 64742, got 92) [ 460.743596][ T5284] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 460.774789][ T5284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.833836][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 460.866857][ T8665] loop3: detected capacity change from 0 to 2048 [ 460.898429][ T5284] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.928683][ T8665] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 460.942529][ T5284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.945910][ T8392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.952216][ T8665] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 460.993728][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.010440][ T5284] usb 3-1: Product: syz [ 461.024860][ T5284] usb 3-1: Manufacturer: syz [ 461.029508][ T5284] usb 3-1: SerialNumber: syz [ 461.051452][ T5284] cdc_ncm 3-1:1.0: skipping garbage [ 461.064156][ T5284] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 461.096740][ T5284] cdc_ncm 3-1:1.0: bind() failure [ 461.298016][ T8670] loop3: detected capacity change from 0 to 1024 [ 461.330791][ T5284] usb 3-1: USB disconnect, device number 14 [ 461.337971][ T8670] EXT4-fs: quotafile must be on filesystem root [ 461.457386][ T8676] Unsupported ieee802154 address type: 0 [ 462.961805][ T8682] loop3: detected capacity change from 0 to 1024 [ 463.160423][ T29] audit: type=1326 audit(1727864137.254:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.2.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f032f37dff9 code=0x0 [ 463.616065][ T8690] loop1: detected capacity change from 0 to 256 [ 463.626179][ T8690] vfat: Bad value for 'fmask' [ 463.859107][ T29] audit: type=1326 audit(1727864137.544:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x0 [ 464.726862][ T5602] hfsplus: b-tree write err: -5, ino 4 [ 465.267604][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 465.909728][ T8708] loop1: detected capacity change from 0 to 131072 [ 469.202102][ T8720] fuse: Bad value for 'fd' [ 469.412504][ T8712] delete_channel: no stack [ 470.492975][ T8731] mmap: syz.1.529 (8731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 470.542756][ T8731] loop1: detected capacity change from 0 to 512 [ 470.965082][ T8731] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 470.984830][ T8731] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.529: invalid indirect mapped block 1 (level 1) [ 471.017498][ T8731] EXT4-fs (loop1): 1 truncate cleaned up [ 471.024201][ T8731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.234513][ T8745] loop0: detected capacity change from 0 to 2048 [ 472.255435][ T29] audit: type=1326 audit(1727864146.354:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.3.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ab537dff9 code=0x0 [ 473.273020][ T8392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.297593][ T8745] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 474.163800][ T29] audit: type=1326 audit(1727864148.234:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.2.535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f032f37dff9 code=0x0 [ 474.203194][ T8754] loop2: detected capacity change from 0 to 256 [ 474.210006][ T8754] vfat: Bad value for 'fmask' [ 474.227223][ T8745] EXT4-fs: failed to create workqueue [ 474.257751][ T8745] EXT4-fs (loop0): mount failed [ 475.663867][ T8779] loop4: detected capacity change from 0 to 4096 [ 475.772916][ T8779] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 475.782174][ T5239] Bluetooth: Unexpected continuation frame (len 10) [ 475.954274][ T8784] fuse: Bad value for 'fd' [ 475.976546][ T8779] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 476.355092][ T8790] loop0: detected capacity change from 0 to 256 [ 476.416652][ T8790] vfat: Bad value for 'dmask' [ 477.499954][ T8801] qrtr: Invalid version 6 [ 477.794760][ T8619] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 477.864903][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.544'. [ 477.873926][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.544'. [ 477.882962][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.544'. [ 477.892109][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.544'. [ 478.081961][ T8619] usb 2-1: Using ep0 maxpacket: 8 [ 478.363280][ T8619] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 478.378300][ T8619] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.387953][ T8619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.396348][ T8619] usb 2-1: Product: syz [ 478.444233][ T8619] usb 2-1: Manufacturer: syz [ 478.469126][ T8619] usb 2-1: SerialNumber: syz [ 478.575254][ T8619] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 478.652219][ T8810] loop0: detected capacity change from 0 to 512 [ 478.747265][ T8814] loop4: detected capacity change from 0 to 512 [ 478.757737][ T8810] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.546: corrupted in-inode xattr: invalid ea_ino [ 478.791336][ T8814] EXT4-fs: Ignoring removed bh option [ 478.809925][ T8815] loop2: detected capacity change from 0 to 256 [ 478.839000][ T8799] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20003 [ 478.847622][ T8815] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 478.880945][ T8810] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.546: couldn't read orphan inode 15 (err -117) [ 478.915007][ T5234] usb 2-1: USB disconnect, device number 10 [ 478.944391][ T8810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.973972][ T8815] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 478.994053][ T8814] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 479.069060][ T8814] EXT4-fs (loop4): 1 truncate cleaned up [ 479.079342][ T8814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.468752][ T8820] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.546: Directory hole found for htree leaf block 0 [ 481.174011][ T8821] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.546: Directory hole found for htree leaf block 0 [ 481.461813][ T8241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.476920][ T8428] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.505221][ T8828] loop1: detected capacity change from 0 to 256 [ 481.833871][ T8834] loop0: detected capacity change from 0 to 512 [ 482.380928][ T8834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 482.521240][ T8832] loop4: detected capacity change from 0 to 512 [ 482.568561][ T8834] EXT4-fs (loop0): 1 orphan inode deleted [ 482.574437][ T8834] EXT4-fs (loop0): 1 truncate cleaned up [ 482.580977][ T8834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.623839][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.633309][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.642965][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.651589][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.660340][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 482.669167][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.676315][ T8836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 482.780679][ T8828] ptrace attach of "./syz-executor exec"[8392] was attempted by "./syz-executor exec"[8828] [ 482.883314][ T8832] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 482.930507][ T8836] EXT4-fs (loop0): Remounting filesystem read-only [ 482.950016][ T8241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.225093][ T8846] loop2: detected capacity change from 0 to 1024 [ 484.351792][ T8846] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 484.398886][ T8838] chnl_net:caif_netlink_parms(): no params data found [ 484.528419][ T8846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 484.537576][ T8846] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 484.545085][ T8846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.700751][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.728460][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.849132][ T5239] Bluetooth: hci5: command tx timeout [ 485.061464][ T8838] bridge_slave_0: entered allmulticast mode [ 485.096468][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.112101][ T8838] bridge_slave_0: entered promiscuous mode [ 485.215474][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.493042][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.620541][ T8838] bridge_slave_1: entered allmulticast mode [ 485.629213][ T8838] bridge_slave_1: entered promiscuous mode [ 485.678967][ T8861] fuse: Bad value for 'fd' [ 485.958263][ T8864] loop2: detected capacity change from 0 to 512 [ 485.969251][ T8864] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 486.273280][ T8872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.647201][ T8875] loop4: detected capacity change from 0 to 512 [ 487.107796][ T5239] Bluetooth: hci5: command tx timeout [ 487.119073][ T8874] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 488.688937][ T8864] EXT4-fs (loop2): 1 truncate cleaned up [ 488.771694][ T8864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.793614][ T8838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.192950][ T5239] Bluetooth: hci5: command tx timeout [ 489.212330][ T8889] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 489.219196][ T8889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.228113][ T8890] vhci_hcd: connection closed [ 489.236143][ T8889] vhci_hcd vhci_hcd.0: Device attached [ 489.249124][ T5598] vhci_hcd: stop threads [ 489.277277][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.288070][ T5598] vhci_hcd: release socket [ 489.306951][ T5598] vhci_hcd: disconnect device [ 489.314820][ T8891] loop1: detected capacity change from 0 to 2048 [ 489.382981][ T8838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.420665][ T8891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.714302][ T2872] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.351136][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 490.616615][ T8838] team0: Port device team_slave_0 added [ 490.635112][ T8392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.692557][ T8838] team0: Port device team_slave_1 added [ 490.755469][ T2872] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.871862][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.566'. [ 490.930532][ T8910] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 491.087364][ T2872] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.213145][ T8912] loop4: detected capacity change from 0 to 1024 [ 491.231586][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.245611][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.281389][ T5239] Bluetooth: hci5: command tx timeout [ 491.439024][ T8916] input: syz1 as /devices/virtual/input/input19 [ 491.654459][ T8838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.949409][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.979575][ T8921] fuse: Bad value for 'fd' [ 491.991626][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.186371][ T8838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.660014][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 493.358908][ T8934] loop0: detected capacity change from 0 to 131072 [ 493.511391][ T2872] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.412939][ T8936] ax25_connect(): syz.1.571 uses autobind, please contact jreuter@yaina.de [ 495.317113][ T8838] hsr_slave_0: entered promiscuous mode [ 495.342756][ T8838] hsr_slave_1: entered promiscuous mode [ 495.415167][ T8943] loop4: detected capacity change from 0 to 4096 [ 495.430102][ T8838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.442026][ T8838] Cannot create hsr debugfs directory [ 495.729540][ T8943] NILFS (loop4): invalid segment: Checksum error in segment payload [ 495.941002][ T8943] NILFS (loop4): trying rollback from an earlier position [ 496.210040][ T8943] NILFS (loop4): recovery complete [ 496.257429][ T8961] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.391330][ T2872] bridge_slave_1: left allmulticast mode [ 496.410495][ T2872] bridge_slave_1: left promiscuous mode [ 496.416436][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.441691][ T8965] loop1: detected capacity change from 0 to 512 [ 496.448798][ T8966] loop2: detected capacity change from 0 to 512 [ 496.459006][ T2872] bridge_slave_0: left allmulticast mode [ 496.463801][ T8966] ext4: Unknown parameter 'subj_role' [ 496.478468][ T8965] EXT4-fs (loop1): filesystem is read-only [ 496.493572][ T2872] bridge_slave_0: left promiscuous mode [ 496.512396][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.522826][ T8965] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 496.576582][ T8965] EXT4-fs (loop1): filesystem is read-only [ 496.590493][ T8966] loop2: detected capacity change from 0 to 1024 [ 496.604296][ T8965] EXT4-fs (loop1): orphan cleanup on readonly fs [ 496.622913][ T8965] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.577: bg 0: block 64: padding at end of block bitmap is not set [ 496.656412][ T8965] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 496.696313][ T8965] EXT4-fs (loop1): 1 orphan inode deleted [ 496.713049][ T8965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 497.017371][ T29] audit: type=1800 audit(1727864171.114:108): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.578" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 497.475452][ T8976] fuse: Bad value for 'fd' [ 497.776937][ T8983] xt_TCPMSS: Only works on TCP SYN packets [ 498.074156][ T8987] loop2: detected capacity change from 0 to 1024 [ 498.084180][ T8987] EXT4-fs: Ignoring removed oldalloc option [ 498.111928][ T8987] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 498.122174][ T8987] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (28593!=20869) [ 498.132741][ T8987] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 498.153298][ T8987] JBD2: no valid journal superblock found [ 498.159208][ T8987] EXT4-fs (loop2): Could not load journal inode [ 499.141039][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 499.805240][ T8992] loop2: detected capacity change from 0 to 131072 [ 500.297303][ T2872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.372487][ T8996] input: syz1 as /devices/virtual/input/input20 [ 500.469014][ T2872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.818873][ T2872] bond0 (unregistering): Released all slaves [ 501.251513][ T8392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.830757][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.968813][ T9011] loop4: detected capacity change from 0 to 128 [ 502.090186][ T9014] loop1: detected capacity change from 0 to 1024 [ 502.143767][ T9011] syz.4.588: attempt to access beyond end of device [ 502.143767][ T9011] loop4: rw=2049, sector=145, nr_sectors = 648 limit=128 [ 502.188259][ T9014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 502.986008][ T9014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.108548][ T9019] loop0: detected capacity change from 0 to 256 [ 503.120726][ T9019] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 504.029352][ T5284] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 504.211773][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 504.256387][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 504.289092][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 504.319973][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 504.378950][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.411550][ T5284] usb 5-1: config 0 descriptor?? [ 504.417207][ T9015] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 504.436441][ T5284] hub 5-1:0.0: USB hub found [ 504.481575][ T2872] hsr_slave_0: left promiscuous mode [ 504.506235][ T2872] hsr_slave_1: left promiscuous mode [ 504.653581][ T5284] hub 5-1:0.0: 2 ports detected [ 505.381247][ T5284] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 505.388160][ T5284] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 505.417488][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.447141][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.459629][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 505.481691][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.496257][ T8392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.675476][ T5284] usb 5-1: USB disconnect, device number 12 [ 505.683420][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.150697][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.444191][ T9062] loop1: detected capacity change from 0 to 256 [ 506.455795][ T2872] veth1_macvtap: left promiscuous mode [ 506.476512][ T2872] veth0_macvtap: left promiscuous mode [ 506.486651][ T2872] veth1_vlan: left promiscuous mode [ 506.517872][ T9062] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 506.542761][ T2872] veth0_vlan: left promiscuous mode [ 506.625986][ T9062] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 506.625986][ T9062] [ 506.655348][ T9062] exFAT-fs (loop1): Filesystem has been set read-only [ 506.672671][ T9062] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 506.672671][ T9062] [ 506.685537][ T9062] exFAT-fs (loop1): error, failed to bmap (inode : ffff88807fa92e68 iblock : 0, err : -5) [ 507.621188][ T8959] kworker/u8:0: attempt to access beyond end of device [ 507.621188][ T8959] loop4: rw=1, sector=177, nr_sectors = 1 limit=128 [ 507.643372][ T8959] Buffer I/O error on dev loop4, logical block 177, lost async page write [ 507.663424][ T9064] loop0: detected capacity change from 0 to 256 [ 507.671368][ T9064] FAT-fs (loop0): invalid media value (0x29) [ 507.677380][ T9064] FAT-fs (loop0): Can't find a valid FAT filesystem [ 508.520908][ T9071] loop4: detected capacity change from 0 to 512 [ 508.538336][ T9071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 508.593280][ T9071] EXT4-fs (loop4): 1 orphan inode deleted [ 508.599076][ T9071] EXT4-fs (loop4): 1 truncate cleaned up [ 508.606736][ T9071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.992553][ T9075] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.595: iget: bad extra_isize 46 (inode size 256) [ 509.108560][ T9075] EXT4-fs (loop4): Remounting filesystem read-only [ 509.480618][ T8619] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 509.619935][ T9080] loop0: detected capacity change from 0 to 256 [ 509.645859][ T9080] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 509.668871][ T8619] usb 5-1: Using ep0 maxpacket: 16 [ 509.678905][ T8619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 509.691838][ T8619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 509.713013][ T9080] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1911af20) [ 509.714312][ T8619] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 509.723718][ T9080] exFAT-fs (loop0): invalid boot region [ 509.738286][ T9080] exFAT-fs (loop0): failed to recognize exfat type [ 509.784694][ T8619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.841748][ T8619] usb 5-1: config 0 descriptor?? [ 510.088471][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 510.752261][ T2872] team0 (unregistering): Port device team_slave_1 removed [ 510.896264][ T2872] team0 (unregistering): Port device team_slave_0 removed [ 512.325598][ T9075] syzkaller0: entered promiscuous mode [ 512.331334][ T9075] syzkaller0: entered allmulticast mode [ 512.433133][ T8619] usbhid 5-1:0.0: can't add hid device: -71 [ 512.443075][ T8619] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 512.456327][ T8619] usb 5-1: USB disconnect, device number 13 [ 513.915829][ T9104] usb usb7: usbfs: process 9104 (syz.2.600) did not claim interface 0 before use [ 514.182978][ T5311] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 514.494049][ T5311] usb 3-1: Using ep0 maxpacket: 8 [ 514.501418][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.513018][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.531194][ T5311] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 514.540820][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.576110][ T5311] usb 3-1: config 0 descriptor?? [ 515.069412][ T9105] loop0: detected capacity change from 0 to 4096 [ 515.504397][ T9105] ntfs3(loop0): Failed to load $Extend (-22). [ 515.519555][ T9105] ntfs3(loop0): Failed to initialize $Extend. [ 516.497754][ T5311] usbhid 3-1:0.0: can't add hid device: -71 [ 516.503926][ T5311] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 516.598144][ T9112] usb usb7: usbfs: process 9112 (syz.0.602) did not claim interface 0 before use [ 516.937774][ T5234] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 517.047964][ T5311] usb 3-1: USB disconnect, device number 15 [ 517.297170][ T5234] usb 1-1: Using ep0 maxpacket: 8 [ 517.304570][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.316541][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.326924][ T5234] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 517.384693][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.076872][ T5234] usb 1-1: config 0 descriptor?? [ 518.349522][ T8428] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.403449][ T9126] loop2: detected capacity change from 0 to 8 [ 518.450423][ T9126] SQUASHFS error: lzo decompression failed, data probably corrupt [ 518.489036][ T8838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 518.537375][ T9126] SQUASHFS error: Failed to read block 0x28d: -5 [ 518.555250][ T8838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.575775][ T9126] SQUASHFS error: Unable to read metadata cache entry [28b] [ 518.587403][ T9126] SQUASHFS error: Unable to read inode 0x11f [ 518.639088][ T8838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.707372][ T8838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.917720][ T9126] sd 0:0:1:0: PR command failed: 1026 [ 518.947791][ T9126] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 518.966375][ T9126] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 519.101334][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.160636][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.183190][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.265708][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.302604][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 519.310563][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.354396][ T9142] loop1: detected capacity change from 0 to 512 [ 519.655824][ T9142] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 519.663587][ T9142] UDF-fs: Scanning with blocksize 512 failed [ 519.683814][ T9142] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 519.691436][ T9142] UDF-fs: Scanning with blocksize 1024 failed [ 519.698310][ T9142] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 519.705924][ T9142] UDF-fs: Scanning with blocksize 2048 failed [ 519.713119][ T9142] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 519.744804][ T9142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.814499][ T9147] xt_socket: unknown flags 0x50 [ 520.343142][ T5234] usbhid 1-1:0.0: can't add hid device: -71 [ 520.350100][ T5234] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 520.392062][ T5234] usb 1-1: USB disconnect, device number 10 [ 520.555458][ T2872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.636533][ T9150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 520.643111][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 520.662798][ T8838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.684180][ T8838] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.705547][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.712729][ T8999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.780938][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 520.949289][ T2872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.963444][ T5282] vhci_hcd: vhci_device speed not set [ 521.032577][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.039746][ T8999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.119680][ T9158] loop2: detected capacity change from 0 to 64 [ 521.358243][ T9158] libceph: resolve '0.0' (ret=-3): failed [ 521.410393][ T9151] vhci_hcd: connection closed [ 521.442671][ T5601] vhci_hcd: stop threads [ 521.453908][ T5239] Bluetooth: hci1: command tx timeout [ 521.697236][ T5282] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 521.850527][ T5601] vhci_hcd: release socket [ 521.880420][ T5601] vhci_hcd: disconnect device [ 521.896583][ T2872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.105683][ T2872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.305524][ T8838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.720838][ T9176] usb usb7: usbfs: process 9176 (syz.2.613) did not claim interface 0 before use [ 523.516253][ T5239] Bluetooth: hci1: command tx timeout [ 523.953432][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 524.040957][ T5234] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 524.705339][ T9185] loop0: detected capacity change from 0 to 1024 [ 524.724946][ T5234] usb 3-1: Using ep0 maxpacket: 8 [ 524.737012][ T9185] hfsplus: invalid attributes max_key_len 0 [ 524.743348][ T9185] hfsplus: failed to load attributes file [ 524.763012][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.904027][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.914813][ T5234] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 524.925432][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.926812][ T2872] bridge_slave_1: left allmulticast mode [ 524.937317][ T5234] usb 3-1: config 0 descriptor?? [ 524.940042][ T2872] bridge_slave_1: left promiscuous mode [ 524.950910][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.108032][ T5239] Bluetooth: hci1: command tx timeout [ 526.153027][ T2872] bridge_slave_0: left allmulticast mode [ 526.158823][ T2872] bridge_slave_0: left promiscuous mode [ 526.164766][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.140413][ T5282] vhci_hcd: vhci_device speed not set [ 527.145089][ T5234] usbhid 3-1:0.0: can't add hid device: -71 [ 527.151914][ T5234] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 527.168589][ T5234] usb 3-1: USB disconnect, device number 16 [ 527.648130][ T9206] loop1: detected capacity change from 0 to 512 [ 528.152019][ T5239] Bluetooth: hci1: command tx timeout [ 528.205046][ T9209] loop2: detected capacity change from 0 to 1024 [ 528.324604][ T9209] EXT4-fs: Ignoring removed orlov option [ 528.390064][ T9209] EXT4-fs (loop2): Test dummy encryption mode enabled [ 528.441681][ T9206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.454959][ T9206] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 528.575989][ T9209] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 528.638744][ T29] audit: type=1800 audit(1727864202.584:109): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.616" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 528.693310][ T29] audit: type=1800 audit(1727864202.584:110): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.616" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 528.733231][ T9209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.857700][ T8392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.071581][ T5234] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 529.242143][ T5234] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 529.251707][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.264509][ T5234] usb 3-1: config 0 descriptor?? [ 529.298016][ T2872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.311819][ T2872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.323200][ T2872] bond0 (unregistering): Released all slaves [ 529.366637][ T9224] [U] ^C [ 529.514461][ T9234] loop1: detected capacity change from 0 to 512 [ 529.523576][ T9234] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 529.698249][ T9209] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 529.732503][ T8838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.083883][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.091489][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.115265][ T9139] bridge_slave_0: entered allmulticast mode [ 531.151651][ T9139] bridge_slave_0: entered promiscuous mode [ 531.160937][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.182443][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.280408][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.322401][ T9251] loop0: detected capacity change from 0 to 16 [ 531.329026][ T9139] bridge_slave_1: entered allmulticast mode [ 531.341167][ T5234] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 531.351437][ T5234] asix 3-1:0.0: probe with driver asix failed with error -71 [ 531.361696][ T5234] usb 3-1: USB disconnect, device number 17 [ 531.371948][ T9139] bridge_slave_1: entered promiscuous mode [ 531.378323][ T9251] erofs: Unknown parameter '' [ 532.263459][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.338765][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.654526][ T9270] loop0: detected capacity change from 0 to 1024 [ 535.375742][ T9287] loop2: detected capacity change from 0 to 1024 [ 535.383542][ T2872] hsr_slave_0: left promiscuous mode [ 535.441747][ T2872] hsr_slave_1: left promiscuous mode [ 535.501494][ T5281] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 535.509320][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.520857][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.575372][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.590480][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.664266][ T5281] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=e6.01 [ 535.690454][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.864521][ T9290] loop0: detected capacity change from 0 to 40427 [ 535.889149][ T2872] veth1_macvtap: left promiscuous mode [ 535.896917][ T2872] veth0_macvtap: left promiscuous mode [ 535.903563][ T9290] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 535.911831][ T9290] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 535.915054][ T5281] usb 2-1: Product: syz [ 535.928589][ T5281] usb 2-1: Manufacturer: syz [ 535.933596][ T5281] usb 2-1: SerialNumber: syz [ 535.942429][ T2872] veth1_vlan: left promiscuous mode [ 535.947773][ T2872] veth0_vlan: left promiscuous mode [ 535.954456][ T5281] usb 2-1: config 0 descriptor?? [ 535.966329][ T5281] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 535.972892][ T5281] usb 2-1: Forcing UVC version to 1.0a [ 535.978400][ T5281] usb 2-1: No valid video chain found. [ 536.082368][ T9290] F2FS-fs (loop0): Found nat_bits in checkpoint [ 536.717421][ T9290] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 536.725347][ T9290] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 537.571350][ T5323] usb 2-1: USB disconnect, device number 11 [ 542.252463][ T29] audit: type=1326 audit(1727864216.354:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 542.346783][ T9325] overlayfs: missing 'lowerdir' [ 543.128191][ T29] audit: type=1326 audit(1727864216.354:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.150383][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.178915][ T9327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.190989][ T9327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.201362][ T9327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.209107][ T9327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.218272][ T9327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 543.226757][ T9327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.310515][ T29] audit: type=1326 audit(1727864217.404:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.332663][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.436446][ T29] audit: type=1326 audit(1727864217.404:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.471274][ T29] audit: type=1326 audit(1727864217.404:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.541015][ T29] audit: type=1326 audit(1727864217.404:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.582540][ T29] audit: type=1326 audit(1727864217.404:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.605614][ T29] audit: type=1326 audit(1727864217.404:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.760346][ T29] audit: type=1326 audit(1727864217.404:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 543.782596][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.194172][ T29] audit: type=1326 audit(1727864217.404:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8397dff9 code=0x7fc00000 [ 544.216429][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.385634][ T9336] loop1: detected capacity change from 0 to 128 [ 545.320967][ T9327] Bluetooth: hci0: command 0x0406 tx timeout [ 545.327040][ T9327] Bluetooth: hci2: command 0x0406 tx timeout [ 545.462797][ T54] Bluetooth: hci4: command tx timeout [ 547.212579][ T2872] team0 (unregistering): Port device team_slave_1 removed [ 547.522482][ T5239] Bluetooth: hci4: command tx timeout [ 547.767588][ T2872] team0 (unregistering): Port device team_slave_0 removed [ 547.988527][ T9370] loop1: detected capacity change from 0 to 8 [ 548.450570][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 549.052056][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 549.061216][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.072261][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 549.096463][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.109914][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 549.127610][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 549.136299][ T8] usb 1-1: Product: syz [ 549.148139][ T8] usb 1-1: Manufacturer: syz [ 549.163056][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 549.178514][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 549.209796][ T8] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 549.594300][ T5239] Bluetooth: hci4: command tx timeout [ 549.721299][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 549.793116][ T5323] usb 1-1: USB disconnect, device number 11 [ 549.867783][ T9139] team0: Port device team_slave_0 added [ 549.939930][ T9139] team0: Port device team_slave_1 added [ 550.093107][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.173584][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.424905][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.997377][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.007885][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.037299][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.399384][ T9329] chnl_net:caif_netlink_parms(): no params data found [ 551.544829][ T9139] hsr_slave_0: entered promiscuous mode [ 551.570517][ T9139] hsr_slave_1: entered promiscuous mode [ 551.576555][ T9139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.587313][ T9139] Cannot create hsr debugfs directory [ 551.681045][ T5239] Bluetooth: hci4: command tx timeout [ 551.993920][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.020625][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.028041][ T9329] bridge_slave_0: entered allmulticast mode [ 552.067681][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 552.067698][ T29] audit: type=1800 audit(1727864226.164:216): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.647" name="file0" dev="overlay" ino=297 res=0 errno=0 [ 552.081345][ T9329] bridge_slave_0: entered promiscuous mode [ 553.533687][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.560551][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.588322][ T9329] bridge_slave_1: entered allmulticast mode [ 553.639336][ T9329] bridge_slave_1: entered promiscuous mode [ 554.504907][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.514866][ T9428] loop0: detected capacity change from 0 to 8 [ 554.522562][ T9430] loop2: detected capacity change from 0 to 512 [ 554.544596][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.604313][ T9428] squashfs: Unknown parameter 'dÀš' [ 554.643540][ T9430] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 554.721082][ T9430] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.652: invalid indirect mapped block 2683928664 (level 1) [ 554.768494][ T9430] EXT4-fs (loop2): Remounting filesystem read-only [ 554.812226][ T9430] EXT4-fs (loop2): 1 truncate cleaned up [ 554.818417][ T9430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.463619][ T9329] team0: Port device team_slave_0 added [ 555.587852][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.830942][ T9448] Invalid source name [ 555.835212][ T9448] UBIFS error (pid: 9448): cannot open "./file0", error -22 [ 555.920835][ T9452] loop2: detected capacity change from 0 to 1024 [ 555.949110][ T9329] team0: Port device team_slave_1 added [ 556.031859][ T9452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.097013][ T9452] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.034402][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.185365][ T9459] loop2: detected capacity change from 0 to 1024 [ 557.192518][ T9459] hfsplus: Unknown parameter 'nodecomp' [ 557.464795][ T9461] loop2: detected capacity change from 0 to 256 [ 558.682923][ T9461] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 558.695758][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.703373][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.797498][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.849173][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.884037][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.963439][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.155224][ T9329] hsr_slave_0: entered promiscuous mode [ 559.197715][ T9329] hsr_slave_1: entered promiscuous mode [ 559.228539][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.255944][ T9329] Cannot create hsr debugfs directory [ 559.478493][ T2872] bridge_slave_1: left allmulticast mode [ 559.508112][ T2872] bridge_slave_1: left promiscuous mode [ 559.533764][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.576797][ T2872] bridge_slave_0: left allmulticast mode [ 559.598649][ T2872] bridge_slave_0: left promiscuous mode [ 559.633015][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.710860][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 561.206882][ T2872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.262717][ T2872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.302263][ T2872] bond0 (unregistering): Released all slaves [ 561.350771][ T9139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 561.450633][ T2872] hsr_slave_0: left promiscuous mode [ 561.482947][ T2872] hsr_slave_1: left promiscuous mode [ 561.521015][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.565875][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.779692][ T9523] loop1: detected capacity change from 0 to 512 [ 561.826514][ T9523] ext4: Unknown parameter 'subj_role' [ 561.943070][ T9523] loop1: detected capacity change from 0 to 1024 [ 562.336144][ T29] audit: type=1800 audit(1727864236.434:217): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.657" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 562.408203][ T2872] team0 (unregistering): Port device team_slave_1 removed [ 562.565346][ T2872] team0 (unregistering): Port device team_slave_0 removed [ 563.323913][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.611013][ T9541] loop1: detected capacity change from 0 to 2048 [ 564.654742][ T9541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.891826][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.918989][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.919423][ T8392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.929087][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.955182][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.990178][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 567.037734][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.134093][ T54] Bluetooth: hci5: command tx timeout [ 569.138433][ T9578] input: syz1 as /devices/virtual/input/input22 [ 569.673261][ T9582] loop2: detected capacity change from 0 to 256 [ 569.694932][ T9582] vfat: Unknown parameter 'ÿÿ¢(¿&Â]t%©y9yuÒ01Ò„ÄGËÌ“bQM|Ï/üOÝßh—ÊáòË&›¸¢‡‡â¯°¾á—4ÆùÄ_ÄÉ¥åTÁÈpy´^ó' [ 569.797612][ T9139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 569.820896][ T9582] loop2: detected capacity change from 0 to 256 [ 569.885021][ T9139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 569.994898][ T9139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 570.184706][ T29] audit: type=1326 audit(1727864244.199:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.2.667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f032f37dff9 code=0x0 [ 570.373476][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.385602][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.421142][ T9139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.431823][ T9139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.553278][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.560469][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.618193][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.625360][ T8959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.805505][ T9598] loop2: detected capacity change from 0 to 1024 [ 571.010997][ T9598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.035480][ T9598] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.250738][ T54] Bluetooth: hci5: command tx timeout [ 572.362019][ T9556] chnl_net:caif_netlink_parms(): no params data found [ 572.388060][ T9620] loop1: detected capacity change from 0 to 256 [ 572.407233][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.676611][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 573.962524][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.094652][ T9640] loop1: detected capacity change from 0 to 2048 [ 574.102834][ T9640] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 574.117858][ T9640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.621575][ T5239] Bluetooth: hci5: command tx timeout [ 575.894551][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.904179][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.934286][ T9556] bridge_slave_0: entered allmulticast mode [ 575.953956][ T9556] bridge_slave_0: entered promiscuous mode [ 576.022511][ T9329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 576.033341][ T9329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 576.183130][ T9329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 576.295282][ T5601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.331294][ T9657] loop2: detected capacity change from 0 to 2048 [ 576.342602][ T9657] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 576.379323][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.386532][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.411272][ T9556] bridge_slave_1: entered allmulticast mode [ 576.420895][ T9556] bridge_slave_1: entered promiscuous mode [ 576.430344][ T9657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 576.451844][ T9329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 576.554175][ T5601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.636293][ T9663] loop1: detected capacity change from 0 to 1024 [ 576.689243][ T9663] EXT4-fs: Ignoring removed orlov option [ 576.712208][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.725559][ T9663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.744720][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 576.826502][ T5239] Bluetooth: hci5: command tx timeout [ 576.923237][ T9661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'. [ 577.426515][ T9663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.439930][ T5601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.486862][ T9661] No such timeout policy "syz0" [ 577.545179][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.733285][ T5601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.821319][ T9556] team0: Port device team_slave_0 added [ 577.831070][ T9556] team0: Port device team_slave_1 added [ 577.887607][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.894683][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.922342][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.947764][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.955292][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.982251][ T5311] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 577.991333][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.003360][ T9672] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.068374][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.085709][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.097299][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.104479][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.156110][ T9139] veth0_vlan: entered promiscuous mode [ 578.176047][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.193719][ T9556] hsr_slave_0: entered promiscuous mode [ 578.199651][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.210751][ T5311] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 578.220139][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.230152][ T9556] hsr_slave_1: entered promiscuous mode [ 578.236386][ T9556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.237229][ T5311] usb 3-1: config 0 descriptor?? [ 578.265310][ T9556] Cannot create hsr debugfs directory [ 578.314396][ T9139] veth1_vlan: entered promiscuous mode [ 578.348134][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.355297][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.392223][ T5601] bridge_slave_1: left allmulticast mode [ 578.398362][ T5601] bridge_slave_1: left promiscuous mode [ 578.404632][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.417206][ T5601] bridge_slave_0: left allmulticast mode [ 578.435618][ T5601] bridge_slave_0: left promiscuous mode [ 578.445209][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.540782][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.555041][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.576966][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.613161][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.621302][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 578.630933][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.702602][ T5311] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 578.732354][ T5311] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 578.758186][ T5311] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 579.014806][ C1] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -71 [ 579.025330][ T5311] usb 3-1: USB disconnect, device number 18 [ 579.066514][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.095833][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.118159][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.144124][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.151952][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 579.159914][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 579.260712][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.271603][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.282920][ T5601] bond0 (unregistering): Released all slaves [ 580.114209][ T9700] futex_wake_op: syz.2.679 tries to shift op by 32; fix this program [ 580.205681][ T5601] hsr_slave_0: left promiscuous mode [ 580.214618][ T5601] hsr_slave_1: left promiscuous mode [ 580.240136][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.257545][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.278837][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.287336][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.310399][ T5601] veth1_macvtap: left promiscuous mode [ 580.317107][ T5601] veth0_macvtap: left promiscuous mode [ 580.323335][ T5601] veth1_vlan: left promiscuous mode [ 580.328587][ T5601] veth0_vlan: left promiscuous mode [ 580.848532][ T54] Bluetooth: hci0: command tx timeout [ 581.438426][ T54] Bluetooth: hci3: command tx timeout [ 581.635037][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 581.693849][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 582.338227][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.474133][ T9680] chnl_net:caif_netlink_parms(): no params data found [ 582.555704][ T9677] chnl_net:caif_netlink_parms(): no params data found [ 582.634614][ T9329] veth0_vlan: entered promiscuous mode [ 582.671203][ T9717] loop2: detected capacity change from 0 to 1024 [ 582.740716][ T9329] veth1_vlan: entered promiscuous mode [ 582.868399][ T9556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.987208][ T9556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.010949][ T9556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.022283][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.030950][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.038539][ T9680] bridge_slave_0: entered allmulticast mode [ 583.045662][ T9680] bridge_slave_0: entered promiscuous mode [ 583.059116][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.067551][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.067810][ T54] Bluetooth: hci0: command tx timeout [ 583.075156][ T9677] bridge_slave_0: entered allmulticast mode [ 583.087357][ T9677] bridge_slave_0: entered promiscuous mode [ 583.097324][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.130123][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.155478][ T9677] bridge_slave_1: entered allmulticast mode [ 583.162715][ T9677] bridge_slave_1: entered promiscuous mode [ 583.170094][ T9556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.188673][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.195747][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.228375][ T9680] bridge_slave_1: entered allmulticast mode [ 583.251165][ T9680] bridge_slave_1: entered promiscuous mode [ 583.355560][ T9680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.385687][ T9329] veth0_macvtap: entered promiscuous mode [ 583.406385][ T9329] veth1_macvtap: entered promiscuous mode [ 583.430648][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.455876][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.488714][ T9680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.600672][ T9677] team0: Port device team_slave_0 added [ 583.658085][ T54] Bluetooth: hci3: command tx timeout [ 583.797575][ T9677] team0: Port device team_slave_1 added [ 583.860254][ T9680] team0: Port device team_slave_0 added [ 583.875307][ T9680] team0: Port device team_slave_1 added [ 583.891408][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.908618][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.919145][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.933443][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.954384][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.975977][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.992639][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.096505][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.106855][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.133507][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.156122][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.168409][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.218804][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.357358][ T9677] hsr_slave_0: entered promiscuous mode [ 584.364431][ T9677] hsr_slave_1: entered promiscuous mode [ 584.396103][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.403088][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.635600][ T9680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.130077][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.140714][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.151119][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.165045][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.174916][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.185549][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.197773][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.224463][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.232116][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.258590][ T9680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.282871][ T54] Bluetooth: hci0: command tx timeout [ 585.288963][ T9329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.299610][ T9329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.308489][ T9329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.317341][ T9329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.531604][ T9743] loop2: detected capacity change from 0 to 2048 [ 585.532953][ T9680] hsr_slave_0: entered promiscuous mode [ 585.555632][ T9743] NILFS (loop2): invalid segment: Sequence number mismatch [ 585.563026][ T9743] NILFS (loop2): trying rollback from an earlier position [ 585.587802][ T9680] hsr_slave_1: entered promiscuous mode [ 585.589013][ T9743] NILFS (loop2): recovery complete [ 585.598769][ T9680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.608230][ T9680] Cannot create hsr debugfs directory [ 585.614586][ T9744] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.883060][ T54] Bluetooth: hci3: command tx timeout [ 586.000341][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.278863][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.546242][ T9677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.656993][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.682279][ T9750] loop2: detected capacity change from 0 to 1024 [ 586.746317][ T9750] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 586.785004][ T9677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.798637][ T9750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 586.824510][ T9750] System zones: 0-1, 3-36 [ 586.832447][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.841692][ T9556] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.851288][ T9750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.863700][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.882763][ T9750] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.684: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 586.947309][ T9677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.975574][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.982757][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.099618][ T9677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.340486][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.362382][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.369591][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.504439][ T9771] loop3: detected capacity change from 0 to 512 [ 587.587390][ T54] Bluetooth: hci0: command tx timeout [ 588.207376][ T54] Bluetooth: hci3: command tx timeout [ 588.301112][ T9677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.371383][ T9771] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 588.386231][ T9771] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 588.396280][ T9771] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.550: Failed to acquire dquot type 1 [ 588.411896][ T5601] bridge_slave_1: left allmulticast mode [ 588.457088][ T5601] bridge_slave_1: left promiscuous mode [ 588.464588][ T9771] EXT4-fs (loop3): 1 truncate cleaned up [ 588.471585][ T9771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.484430][ T9771] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.491468][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.544893][ T5601] bridge_slave_0: left allmulticast mode [ 588.550595][ T5601] bridge_slave_0: left promiscuous mode [ 588.569805][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.591343][ T5601] bridge_slave_1: left allmulticast mode [ 588.601385][ T5601] bridge_slave_1: left promiscuous mode [ 588.607128][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.631868][ T5601] bridge_slave_0: left allmulticast mode [ 588.637574][ T5601] bridge_slave_0: left promiscuous mode [ 588.692935][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 588.739982][ T9329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.749567][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.874910][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 588.882155][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.906785][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.929999][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.956773][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.977189][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.037009][ T8] usb 3-1: config 0 descriptor?? [ 590.098593][ T8] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 590.141528][ T8] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 590.155003][ T8] microsoft 0003:045E:07DA.000A: no inputs found [ 590.167652][ T8] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 591.692662][ T9816] binder: 9810:9816 ioctl 4018620d 0 returned -22 [ 592.364252][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.376025][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.386772][ T5601] bond0 (unregistering): Released all slaves [ 592.561414][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.572681][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.583745][ T5601] bond0 (unregistering): Released all slaves [ 592.593048][ T9677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 592.603197][ T9677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 592.732842][ T5601] IPVS: stopping backup sync thread 8874 ... [ 592.788077][ T9677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 592.892970][ T5311] usb 3-1: USB disconnect, device number 19 [ 593.581959][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.930432][ T9826] loop3: detected capacity change from 0 to 1024 [ 593.966596][ T9823] loop2: detected capacity change from 0 to 32768 [ 593.984371][ T9823] btrfs: Unknown parameter 'fragment' [ 594.358459][ T5601] hsr_slave_0: left promiscuous mode [ 594.377177][ T5601] hsr_slave_1: left promiscuous mode [ 594.390765][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.430108][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.459485][ T5601] hsr_slave_0: left promiscuous mode [ 594.493801][ T5601] hsr_slave_1: left promiscuous mode [ 594.528786][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.541017][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.565674][ T9829] loop2: detected capacity change from 0 to 4096 [ 594.573757][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.581399][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.594868][ T9829] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 594.662144][ T9829] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 594.703487][ T5601] veth1_vlan: left promiscuous mode [ 594.708808][ T29] audit: type=1326 audit(1727864267.144:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032f37dff9 code=0x7ffc0000 [ 594.734387][ T5601] veth0_vlan: left promiscuous mode [ 594.748355][ T5601] veth1_macvtap: left promiscuous mode [ 594.751572][ T29] audit: type=1326 audit(1727864267.144:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f032f37c990 code=0x7ffc0000 [ 594.758958][ T5601] veth0_macvtap: left promiscuous mode [ 594.790571][ T5601] veth1_vlan: left promiscuous mode [ 594.796029][ T5601] veth0_vlan: left promiscuous mode [ 594.807286][ T29] audit: type=1326 audit(1727864267.144:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f032f37f827 code=0x7ffc0000 [ 594.831685][ T29] audit: type=1326 audit(1727864267.144:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f032f37dff9 code=0x7ffc0000 [ 594.855268][ T29] audit: type=1326 audit(1727864267.144:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f032f37f827 code=0x7ffc0000 [ 594.878508][ T29] audit: type=1326 audit(1727864267.144:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f032f37cc8a code=0x7ffc0000 [ 594.902557][ T29] audit: type=1326 audit(1727864267.144:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032f37dff9 code=0x7ffc0000 [ 594.949680][ T29] audit: type=1326 audit(1727864267.144:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032f37dff9 code=0x7ffc0000 [ 594.993553][ T29] audit: type=1326 audit(1727864267.144:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032f37dff9 code=0x7ffc0000 [ 595.071158][ T29] audit: type=1326 audit(1727864267.144:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032f37dff9 code=0x7ffc0000 [ 595.082523][ T9835] loop2: detected capacity change from 0 to 512 [ 595.164111][ T9835] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 595.168339][ T9839] loop3: detected capacity change from 0 to 512 [ 595.208682][ T9839] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 595.212340][ T9835] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.694: invalid indirect mapped block 2683928664 (level 1) [ 595.268269][ T9835] EXT4-fs (loop2): Remounting filesystem read-only [ 595.275152][ T9835] EXT4-fs (loop2): 1 truncate cleaned up [ 595.318697][ T9835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.899355][ T9842] loop3: detected capacity change from 0 to 1024 [ 596.627224][ T5239] Bluetooth: hci3: command 0x0405 tx timeout [ 597.084702][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 597.153980][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 598.725090][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 598.816712][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 599.624058][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.667913][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.696946][ T9556] veth0_vlan: entered promiscuous mode [ 599.842843][ T9850] loop2: detected capacity change from 0 to 512 [ 599.882916][ T9850] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 599.968209][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.993808][ T9556] veth1_vlan: entered promiscuous mode [ 600.000931][ T9680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.016591][ T9680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.047256][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.054338][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.064172][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.071367][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.089304][ T9680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.127606][ T9680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.155480][ T9556] veth0_macvtap: entered promiscuous mode [ 600.173410][ T9556] veth1_macvtap: entered promiscuous mode [ 600.265489][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.283066][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 600.345693][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.377859][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.399499][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.409722][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.438841][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.463949][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.583687][ T9850] loop2: detected capacity change from 0 to 512 [ 600.599326][ T9850] EXT4-fs: Ignoring removed oldalloc option [ 600.646982][ T9850] /dev/loop2: Can't open blockdev [ 600.682407][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.730584][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.776800][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.805509][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.847957][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.876229][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.891212][ T5282] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 600.909245][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.989664][ T9556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.035319][ T9556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.050241][ T9872] loop2: detected capacity change from 0 to 512 [ 601.057391][ T9556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.069599][ T9556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.099937][ T9872] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.699: bad orphan inode 15 [ 601.112434][ T9872] ext4_test_bit(bit=14, block=18) = 1 [ 601.122162][ T9872] is_bad_inode(inode)=0 [ 601.132981][ T9872] NEXT_ORPHAN(inode)=1023 [ 601.137860][ T9872] max_ino=32 [ 601.141167][ T9872] i_nlink=0 [ 601.166352][ T5282] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 601.201137][ T9872] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2976: inode #15: comm syz.2.699: corrupted xattr block 19: e_value size too large [ 601.203764][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.244219][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.244687][ T9872] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 601.274748][ T5282] usb 4-1: config 0 has no interface number 0 [ 601.281629][ T5282] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 601.293012][ T5282] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 601.307376][ T5282] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 601.350658][ T5282] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 601.372620][ T9872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.374527][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.507022][ T9872] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.511347][ T5282] usb 4-1: config 0 descriptor?? [ 601.549494][ T9861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 601.560022][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.585889][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.604766][ T5282] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 601.783360][ T9680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.862855][ T9885] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz.2.699: Directory hole found for htree leaf block 0 [ 601.867915][ T9872] netlink: 68 bytes leftover after parsing attributes in process `syz.2.699'. [ 601.925926][ T9677] veth0_vlan: entered promiscuous mode [ 601.932015][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.970146][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.091701][ T9680] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.173014][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.180286][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.225456][ T8246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.328825][ T9677] veth1_vlan: entered promiscuous mode [ 602.349041][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.356216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.800771][ T81] usb 4-1: Failed to submit usb control message: -110 [ 602.800930][ T81] usb 4-1: unable to send the bmi data to the device: -110 [ 602.800995][ T81] usb 4-1: unable to get target info from device [ 602.801056][ T81] usb 4-1: could not get target info (-110) [ 602.801670][ T81] usb 4-1: could not probe fw (-110) [ 603.364998][ T9680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 603.400133][ T9680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.518288][ T9677] veth0_macvtap: entered promiscuous mode [ 603.608880][ T9677] veth1_macvtap: entered promiscuous mode [ 603.665199][ T5282] usb 4-1: USB disconnect, device number 19 [ 603.671571][ T5329] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 603.780941][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.799023][ T5311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 603.819420][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.835813][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.852693][ T5329] usb 3-1: Using ep0 maxpacket: 8 [ 603.871463][ T5329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 603.884284][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.899081][ T5329] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 603.916689][ T5329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.927372][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.934888][ T9920] loop3: detected capacity change from 0 to 2048 [ 603.938125][ T5329] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 603.953634][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.963923][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.974835][ T5329] usb 3-1: config 1 has no interface number 1 [ 603.981062][ T5329] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 603.993964][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.003933][ T5329] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.018938][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.028560][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.039106][ T5329] usb 3-1: config 1 interface 2 has no altsetting 0 [ 604.044305][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.045872][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.065587][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.066812][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.086966][ T5311] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 604.087019][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.096122][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.096149][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.096165][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.096181][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.096195][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.097429][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.173295][ T5329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.182541][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.191415][ T5329] usb 3-1: Product: syz [ 604.196216][ T5329] usb 3-1: Manufacturer: syz [ 604.196656][ T9920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.200823][ T5329] usb 3-1: SerialNumber: syz [ 604.227082][ T5311] usb 1-1: config 0 descriptor?? [ 604.256478][ T9677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.265790][ T9677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.275594][ T9677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.287926][ T9677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.407824][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.427913][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.446909][ T9680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.485818][ T8959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.518708][ T8959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.528825][ T9908] loop2: detected capacity change from 0 to 128 [ 604.585042][ T9908] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 604.622260][ T9908] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 604.746835][ T5311] lenovo 0003:17EF:6067.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 604.902866][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 605.089309][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 605.346790][ T5311] usb 1-1: USB disconnect, device number 12 [ 605.361804][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 605.425366][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.448806][ T5329] usb 3-1: USB disconnect, device number 20 [ 605.470063][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.530781][ T8] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 605.643106][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.657855][ T9680] veth0_vlan: entered promiscuous mode [ 606.403288][ T9680] veth1_vlan: entered promiscuous mode [ 606.417473][ T8] usb 4-1: config 0 descriptor?? [ 606.682586][ T8246] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 606.683483][ T9680] veth0_macvtap: entered promiscuous mode [ 606.831414][ T9680] veth1_macvtap: entered promiscuous mode [ 606.934042][ T9874] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 607.169142][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.171219][ T8] steelseries 0003:1038:1410.000C: unknown main item tag 0xd [ 607.187514][ T8] steelseries 0003:1038:1410.000C: item fetching failed at offset 6/7 [ 607.192191][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.207519][ T8] steelseries 0003:1038:1410.000C: parse failed [ 607.214013][ T8] steelseries 0003:1038:1410.000C: probe with driver steelseries failed with error -22 [ 607.254348][ T9953] fuse: Bad value for 'fd' [ 607.281393][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.370170][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.517660][ T9958] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 607.526571][ T9958] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 607.538283][ T9958] overlayfs: missing 'lowerdir' [ 608.155184][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.171296][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.176835][ T81] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 608.182290][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.212534][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.233858][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.244758][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.254875][ T81] EXT4-fs (loop3): This should not happen!! Data will be lost [ 608.254875][ T81] [ 608.276129][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.284602][ T81] EXT4-fs (loop3): Total free blocks count 0 [ 608.298425][ T81] EXT4-fs (loop3): Free/Dirty block details [ 608.309796][ T81] EXT4-fs (loop3): free_blocks=2415919104 [ 608.320645][ T81] EXT4-fs (loop3): dirty_blocks=16 [ 608.325983][ T81] EXT4-fs (loop3): Block reservation details [ 608.337696][ T81] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 608.487357][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.522918][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.566850][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.597640][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.627919][ T9965] loop1: detected capacity change from 0 to 128 [ 608.639412][ T9965] EXT4-fs: Ignoring removed i_version option [ 608.652450][ T9965] EXT4-fs: Ignoring removed orlov option [ 608.685441][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.721299][ T9965] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 608.744574][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.758561][ T9965] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 608.792757][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.803801][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.814036][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.845092][ T5311] usb 4-1: USB disconnect, device number 20 [ 608.854409][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 608.854427][ T29] audit: type=1326 audit(1727864280.371:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 608.878763][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.882987][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.270502][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.937473][ T29] audit: type=1326 audit(1727864280.371:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.113108][ T29] audit: type=1326 audit(1727864280.371:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.163253][ T29] audit: type=1326 audit(1727864280.371:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.186440][ T29] audit: type=1326 audit(1727864280.371:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.387536][ T29] audit: type=1326 audit(1727864280.371:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.409895][ T29] audit: type=1326 audit(1727864280.371:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.432852][ T29] audit: type=1326 audit(1727864280.380:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.455173][ T29] audit: type=1326 audit(1727864280.380:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.477757][ T29] audit: type=1326 audit(1727864280.380:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6f6fb7dff9 code=0x7ffc0000 [ 610.671514][ T9329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.749511][ T9677] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 610.757101][ T9977] loop2: detected capacity change from 0 to 256 [ 610.764769][ T5284] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 610.776357][ T9677] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 610.833216][ T9677] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 610.849109][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 610.863133][ T9677] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 610.882242][ T9979] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 610.882719][ T9977] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.891892][ T9677] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 610.920273][ T9677] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 610.926368][ T9680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.942683][ T9680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.951564][ T9680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.960288][ T9680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.226980][ T9677] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 611.299663][ T9677] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 611.485354][ T9983] input: syz1 as /devices/virtual/input/input25 [ 611.788569][ T9677] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 611.866246][ T9677] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 611.945751][ T5284] usb 1-1: unable to read config index 0 descriptor/all [ 611.955195][ T5284] usb 1-1: can't read configurations, error -71 [ 612.005429][ T8959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.024076][ T8959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.072801][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.113738][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.434470][ T5329] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 613.551699][ T5329] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 613.561949][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.621284][ T5329] usb 3-1: config 0 descriptor?? [ 613.932607][T10003] loop4: detected capacity change from 0 to 40427 [ 613.942249][T10003] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 613.950130][T10003] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 613.960091][T10003] F2FS-fs (loop4): invalid crc value [ 614.520493][ T5329] usb 3-1: Cannot read MAC address [ 614.526735][ T5329] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 614.570502][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 614.570520][ T29] audit: type=1326 audit(1727864285.731:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f6fb7dff9 code=0x0 [ 614.627787][T10003] F2FS-fs (loop4): Found nat_bits in checkpoint [ 614.678413][ T5329] usb 3-1: USB disconnect, device number 21 [ 614.709422][T10003] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 614.716609][T10003] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 615.412486][T10011] syz.4.714: attempt to access beyond end of device [ 615.412486][T10011] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 616.319437][ T9677] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.461991][ T8959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.639192][ T8959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.832046][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.849711][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.889939][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 616.897547][ T5329] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 616.920025][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 616.934904][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 616.947448][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 616.969646][ T5323] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 617.031349][ T8959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.077255][ T5329] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 617.143487][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.183735][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.195367][ T5323] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 617.204453][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.233651][ T5329] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 617.260451][ T5323] usb 4-1: config 0 descriptor?? [ 617.272623][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.346155][ T5329] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 617.377053][ T8959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.400258][ T5329] usb 3-1: No valid video chain found. [ 617.587005][ T8] usb 3-1: USB disconnect, device number 22 [ 617.756713][T10022] netlink: 48 bytes leftover after parsing attributes in process `syz.4.716'. [ 617.815209][T10022] netlink: 48 bytes leftover after parsing attributes in process `syz.4.716'. [ 617.923235][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.983466][ T8959] bridge_slave_1: left allmulticast mode [ 617.991444][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.001601][ T8959] bridge_slave_1: left promiscuous mode [ 618.012470][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.057532][T10017] fuse: Bad value for 'group_id' [ 618.071787][ T8959] bridge_slave_0: left allmulticast mode [ 618.078768][T10017] fuse: Bad value for 'group_id' [ 618.099247][ T8959] bridge_slave_0: left promiscuous mode [ 618.110543][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.121973][ T5323] usb 4-1: string descriptor 0 read error: -71 [ 618.163203][ T5323] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #200: -71 [ 618.185185][ T5323] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 618.225384][ T5323] uclogic 0003:256C:006D.000D: failed probing pen v2 parameters: -71 [ 618.257005][ T5323] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 618.270060][ T5323] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 618.539227][ T5323] usb 4-1: USB disconnect, device number 21 [ 618.581555][T10042] loop4: detected capacity change from 0 to 128 [ 619.738574][ T5239] Bluetooth: hci0: command tx timeout [ 620.740040][T10052] loop0: detected capacity change from 0 to 16 [ 621.207781][T10060] xt_CONNSECMARK: invalid mode: 0 [ 621.328915][T10045] loop0: detected capacity change from 0 to 256 [ 621.460460][T10056] syz.3.725 (10056) used greatest stack depth: 17232 bytes left [ 621.513625][T10066] loop2: detected capacity change from 0 to 1024 [ 621.889770][ T54] Bluetooth: hci0: command tx timeout [ 622.283721][T10076] loop0: detected capacity change from 0 to 1024 [ 622.559895][T10079] loop2: detected capacity change from 0 to 8 [ 622.580542][T10079] squashfs: Unknown parameter 'dÀš' [ 622.594957][T10081] loop3: detected capacity change from 0 to 64 [ 622.813999][T10079] Invalid source name [ 622.830799][T10079] UBIFS error (pid: 10079): cannot open "./file0", error -22 [ 622.890942][T10082] syz.3.730: attempt to access beyond end of device [ 622.890942][T10082] loop3: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 622.933279][ T8959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.946267][T10082] syz.3.730: attempt to access beyond end of device [ 622.946267][T10082] loop3: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 622.964043][ T8959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.977489][ T8959] bond0 (unregistering): Released all slaves [ 622.999400][T10082] syz.3.730: attempt to access beyond end of device [ 622.999400][T10082] loop3: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 623.013513][T10018] chnl_net:caif_netlink_parms(): no params data found [ 623.580202][T10091] loop4: detected capacity change from 0 to 4096 [ 623.640262][T10091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.654895][T10018] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.683601][T10018] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.763006][T10018] bridge_slave_0: entered allmulticast mode [ 623.823627][T10099] loop0: detected capacity change from 0 to 256 [ 623.845541][T10018] bridge_slave_0: entered promiscuous mode [ 624.095338][T10018] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.122716][ T54] Bluetooth: hci0: command tx timeout [ 624.134049][T10102] Bluetooth: MGMT ver 1.23 [ 624.156786][T10099] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 624.197279][T10018] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.230533][T10018] bridge_slave_1: entered allmulticast mode [ 624.297636][T10018] bridge_slave_1: entered promiscuous mode [ 624.488347][T10018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.523907][T10018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.685945][ T8959] hsr_slave_0: left promiscuous mode [ 624.692064][ T8959] hsr_slave_1: left promiscuous mode [ 624.708563][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.728438][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.769760][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.816706][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.897240][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.733'. [ 624.925827][T10112] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 624.927094][ T8959] veth1_macvtap: left promiscuous mode [ 624.983806][ T8959] veth0_macvtap: left promiscuous mode [ 624.997878][ T8959] veth1_vlan: left promiscuous mode [ 625.016331][ T8959] veth0_vlan: left promiscuous mode [ 626.550845][ T54] Bluetooth: hci0: command tx timeout [ 626.999992][ T9680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.292827][ T5604] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c7: 0000 [#1] PREEMPT SMP KASAN PTI [ 628.305470][ T5604] KASAN: null-ptr-deref in range [0x0000000000000638-0x000000000000063f] [ 628.313882][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/1:8 Not tainted 6.12.0-rc1-next-20241002-syzkaller #0 [ 628.324117][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 628.334173][ T5604] Workqueue: events_long flush_mdb [ 628.339287][ T5604] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 628.344660][ T5604] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 1c 0e 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 7a fb 73 ff 4d 8b 34 24 49 8d 6e [ 628.364259][ T5604] RSP: 0018:ffffc90009fe7b40 EFLAGS: 00010202 [ 628.370335][ T5604] RAX: ffffffff828ac794 RBX: 00000000000000c7 RCX: ffff8880271f1e00 [ 628.378307][ T5604] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 628.386289][ T5604] RBP: ffffc90009fe7dc0 R08: ffff88807af841eb R09: 1ffff1100f5f083d [ 628.394258][ T5604] R10: dffffc0000000000 R11: ffffed100f5f083e R12: 0000000000000638 [ 628.402223][ T5604] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 628.410188][ T5604] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 628.419106][ T5604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.425684][ T5604] CR2: 00007f971fbeaca8 CR3: 0000000057a02000 CR4: 00000000003526f0 [ 628.433656][ T5604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 628.441627][ T5604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 628.449592][ T5604] Call Trace: [ 628.452873][ T5604] [ 628.455826][ T5604] ? __die_body+0x5f/0xb0 [ 628.460323][ T5604] ? die_addr+0xb0/0xe0 [ 628.464466][ T5604] ? exc_general_protection+0x3dd/0x5d0 [ 628.470009][ T5604] ? asm_exc_general_protection+0x26/0x30 [ 628.475728][ T5604] ? hfs_mdb_commit+0x24/0xfd0 [ 628.480519][ T5604] ? hfs_mdb_commit+0x37/0xfd0 [ 628.485278][ T5604] ? process_scheduled_works+0x976/0x1850 [ 628.490989][ T5604] ? _raw_spin_unlock+0x28/0x50 [ 628.495834][ T5604] ? process_scheduled_works+0x976/0x1850 [ 628.501568][ T5604] process_scheduled_works+0xa63/0x1850 [ 628.507118][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 628.513093][ T5604] ? assign_work+0x364/0x3d0 [ 628.517679][ T5604] worker_thread+0x870/0xd30 [ 628.522269][ T5604] ? __kthread_parkme+0x169/0x1d0 [ 628.527292][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 628.532398][ T5604] kthread+0x2f0/0x390 [ 628.536457][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 628.541561][ T5604] ? __pfx_kthread+0x10/0x10 [ 628.546154][ T5604] ret_from_fork+0x4b/0x80 [ 628.550568][ T5604] ? __pfx_kthread+0x10/0x10 [ 628.555150][ T5604] ret_from_fork_asm+0x1a/0x30 [ 628.559918][ T5604] [ 628.562929][ T5604] Modules linked in: [ 628.567808][ T5604] ---[ end trace 0000000000000000 ]--- [ 628.581460][T10132] loop0: detected capacity change from 0 to 512 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 628.601368][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.676347][T10132] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 628.676414][T10132] EXT4-fs: failed to create workqueue [ 628.706860][T10132] EXT4-fs (loop0): mount failed [ 628.742615][ T5604] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 628.748105][ T5604] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 1c 0e 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 7a fb 73 ff 4d 8b 34 24 49 8d 6e [ 628.761183][ T54] Bluetooth: hci0: command tx timeout [ 628.768853][ T5604] RSP: 0018:ffffc90009fe7b40 EFLAGS: 00010202 [ 628.830753][ T5604] RAX: ffffffff828ac794 RBX: 00000000000000c7 RCX: ffff8880271f1e00 [ 628.865859][ T5604] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 628.900436][ T5604] RBP: ffffc90009fe7dc0 R08: ffff88807af841eb R09: 1ffff1100f5f083d [ 628.931355][ T5604] R10: dffffc0000000000 R11: ffffed100f5f083e R12: 0000000000000638 [ 628.975808][ T5604] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 629.008404][ T5604] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 629.023808][ T5604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.030519][ T5604] CR2: 0000000020032000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 629.043016][ T5604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 629.052630][ T5604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 629.062864][ T5604] Kernel panic - not syncing: Fatal exception [ 629.074508][ T5604] Kernel Offset: disabled [ 629.078839][ T5604] Rebooting in 86400 seconds..