last executing test programs: 1m48.559323691s ago: executing program 1 (id=46): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d0000", 0x15}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="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", 0x1b4}], 0x1}}], 0x2, 0x400c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0xdf9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1m48.286846523s ago: executing program 1 (id=50): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xe}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41eff157cfdfcef90a6010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383e7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d5756c9e5442fa3692127266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f32a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b45ea2408d1da65a2ed8cf55ac8953e5b6a2008336707ca72e7211dafa5"], 0x4, 0x24e, &(0x7f0000000a00)="$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") setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m47.941739772s ago: executing program 1 (id=55): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x8, 0x0, 0x0) fchdir(0xffffffffffffffff) bind$inet6(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xffff}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xff7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0xe) 1m46.966361452s ago: executing program 1 (id=71): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m46.515629839s ago: executing program 1 (id=73): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f00000005c0)={0x0, &(0x7f0000000b40)={0x18, 0xfffffffffffffffe, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m45.959754644s ago: executing program 1 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.835708814s ago: executing program 32 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m43.052309213s ago: executing program 3 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x385010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 1m42.920258093s ago: executing program 3 (id=105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0xfffffffa) 1m42.830628531s ago: executing program 3 (id=106): setreuid(0xee01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006a2ebfa9961c87fb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 1m42.603664259s ago: executing program 3 (id=107): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x300, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}, {@nodelalloc}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x286e066, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m42.323587352s ago: executing program 3 (id=108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000400000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 1m36.467623993s ago: executing program 3 (id=128): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x204000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) 1m36.215798773s ago: executing program 33 (id=128): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x204000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) 1m35.019477801s ago: executing program 4 (id=145): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r3, &(0x7f0000000100)=ANY=[], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x1) 1m34.899331231s ago: executing program 4 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f00000002c0)='./file0\x00') chdir(&(0x7f0000000100)='./file0\x00') 1m34.721536765s ago: executing program 4 (id=150): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x11, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTDaJTau7ar1oDwseDIibX5V4EK2CN8FDBc9Lk9bopinJCm3xoODBP8B/wEPp0augh548CHrw5lUQJFBEBC8VV2Yzm4yb3ZhNsmyb/Xxg4H1nZnnvu7O77+W9RwIYW9WI+CQipiLig4go5+eT/IhLO0d2359/fHwlO5JotS7/nrSvZ3EUXpM5mwezaUT6WRLP9ah369btD+uNxupmHs8112/Mbd26/dLaev3a6rXV6xfnl5cW5xfml5ZPLNdL35R+/vGft9776tfvb2y+eeedrL3n8mvFPE5KNaq770m32klXNmKPFcpJaYQNYSBpRExERKn9/S/HROw9vHJ8Wx5p4wCAoWi1Xu+KAYDTL9HnA8CY6fzd31nbG8Y62MPs/hs7i1f78y/troRMdq1vnaRqRDTuXPguO2JI65AAAEX3svHPK73GP2lcKNx3JiJm8r1d5yLi8Yh4orBf7KiqXfH+8U+6fcwqDpSN/17tOf5NO7dUJvIoy7kSk8nVtcbqfJ7/bExOZ/HCAXW8vPz+3/2uFcd/2ZHV3xkL5u3YLk3/9zUr9Wb9ODkX3f804tlSr/yT3fFv0s776NYebD/od+3/8x+u1pcRL/R8/ns795KD9yfOtT8Pc51PxX5rl3/5oV/9o84/e/4zB+dfSYr7NbcGr2Pz7uc3+1076ud/Knm3XZ7Kz92sN5ubCxFTydv7zy/uvbYTd+7P8p99vvf3/3zsvRNPRsRTEfF0RPv8MwPkf++nyt2j5z9cWf4rAz3/wQt/fb3+Wr/6D/f8L7ZLs/mZw/z+HbaBx3nvAAAA4FGRtudzk7S2W07TWm1nnvd8zKSNja3mi1c3Prq+sjPvW4nJtDPTVS7Mhy7kc4SdeLErXsrnUL6YPtOOa1c2GiujTh4AxtTZPv1/5rfpUbcOABiaYW1uBwAeXvp/ABg/+n8AGD/6fwAYP/p/ABg/+n8AGCvH+b9+CgoKp7Uw6l8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDR+jcAAP//kaDj2Q==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x6008080, &(0x7f0000000140)=ANY=[@ANYBLOB='nodots,dots,nodots,chect,dots,\x00'], 0x1, 0x253, &(0x7f0000000300)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x1043) execveat$binfmt(r0, r1, 0x0, 0x0, 0x1000) 1m34.250933074s ago: executing program 4 (id=158): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000780)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,sys_immutable,utf8=0,quiet,uni_xlate=0,check=strict,nfs=stale_rw,nonumtail\x000,uni_xlate=0,utf8=1,shortname=win95,\x00'], 0x0, 0x275, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m34.038294871s ago: executing program 4 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) getdents64(r2, &(0x7f0000000080)=""/78, 0x4e) renameat2(r2, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) 1m33.099662468s ago: executing program 4 (id=165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="930457492e166f1a7d2c3fe588eab58f3ea3a6af43512f4cf84010250a83d2550482a408c3728ee2ca373c12fe5295a49bac68aa778d8cfb3835e499d3a076b9c07566fd133de5ddbf7e05deafcc17fdd87c7319568c6f05e5d7ea527c0017a1d45a2b26bb8efa769f812cc84539b6e3c839a02f3791f06bbc0e4c5a9dfc3d39c7cab75649bef070f5867d12114769f4b35864215a3b8e7cdeac37174724c64fc60a7d524decc74264cd4400", 0xac}, {&(0x7f0000000200)="9e8b8f2dc80cac0ee907fd59549d08940196897e58c2ccedb8ccf4a5194c58c07ff07d81747565b9aecd", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x443}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m32.901723024s ago: executing program 34 (id=165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="930457492e166f1a7d2c3fe588eab58f3ea3a6af43512f4cf84010250a83d2550482a408c3728ee2ca373c12fe5295a49bac68aa778d8cfb3835e499d3a076b9c07566fd133de5ddbf7e05deafcc17fdd87c7319568c6f05e5d7ea527c0017a1d45a2b26bb8efa769f812cc84539b6e3c839a02f3791f06bbc0e4c5a9dfc3d39c7cab75649bef070f5867d12114769f4b35864215a3b8e7cdeac37174724c64fc60a7d524decc74264cd4400", 0xac}, {&(0x7f0000000200)="9e8b8f2dc80cac0ee907fd59549d08940196897e58c2ccedb8ccf4a5194c58c07ff07d81747565b9aecd", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x443}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m24.687850478s ago: executing program 2 (id=229): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x1043) getdents64(r0, 0xfffffffffffffffe, 0x63) 1m24.097048416s ago: executing program 2 (id=233): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc001) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x2400, 0x4003}, 0x90) 1m23.867338945s ago: executing program 2 (id=234): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 1m23.32206785s ago: executing program 2 (id=240): connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000040)) 1m23.175406032s ago: executing program 2 (id=241): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x4045, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x40049366, 0x0) 1m23.017385445s ago: executing program 2 (id=242): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r3 = epoll_create1(0x0) dup3(r3, r2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1m7.890333265s ago: executing program 35 (id=242): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r3 = epoll_create1(0x0) dup3(r3, r2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 9.609038801s ago: executing program 7 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 9.172171627s ago: executing program 7 (id=864): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xdf5, 0x4, {"f8354fe43dcb8a788006644ed8b7779c"}, 0x8000000000000001, 0x1, 0x8}}}, 0x90) 8.388021841s ago: executing program 7 (id=871): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r3, 0xa}, 0x8) 8.27133312s ago: executing program 6 (id=873): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000740)={0x0, {{0xa, 0x40, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x108) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 8.237962563s ago: executing program 7 (id=874): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2004c00, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 8.1402232s ago: executing program 7 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.819127457s ago: executing program 6 (id=878): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000001f80)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffb}, @tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.640987571s ago: executing program 7 (id=883): syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 7.437914397s ago: executing program 36 (id=883): syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 6.151616121s ago: executing program 6 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x7}}}, 0x24}}, 0x10) 4.953195369s ago: executing program 8 (id=894): openat$sequencer2(0xffffff9c, 0x0, 0x40800, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) sendmmsg(r2, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="18fd26", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) 4.747654805s ago: executing program 5 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000200), 0x4) 3.82319075s ago: executing program 5 (id=896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='qdisc_create\x00', r0, 0x0, 0x8363}, 0x18) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) 3.807134002s ago: executing program 8 (id=897): ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x8d, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 3.535662063s ago: executing program 6 (id=899): r0 = socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x2, 0xffffffffffffffff, 0x30) 2.546758373s ago: executing program 6 (id=900): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.523018776s ago: executing program 5 (id=901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) 1.459740921s ago: executing program 8 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@dfltgid}, {@afid={'afid', 0x3d, 0x5}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004500)={0x2020}, 0x2020) 1.459244612s ago: executing program 6 (id=903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.298968455s ago: executing program 8 (id=904): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 1.292035155s ago: executing program 5 (id=913): dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 927.070895ms ago: executing program 5 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r1) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x40}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x1100000000000000}, 0x44844) 916.034486ms ago: executing program 8 (id=906): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x800000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 798.726575ms ago: executing program 8 (id=907): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket(0x28, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) accept4$unix(r1, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x2, 0x1, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) 730.097341ms ago: executing program 5 (id=908): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[], 0x70}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x3, 0x4}, {0x1}}}, 0x24}}, 0x40c4) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 584.012833ms ago: executing program 0 (id=910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 539.084716ms ago: executing program 0 (id=911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r2, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 395.717638ms ago: executing program 0 (id=912): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0xfffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e23, @empty}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) 301.921946ms ago: executing program 0 (id=914): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) setresuid(0x0, 0xee01, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c) 247.35737ms ago: executing program 0 (id=915): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) 0s ago: executing program 0 (id=916): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x1a1, &(0x7f0000000440)="$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") write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0x8}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0xff, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) kernel console output (not intermixed with test programs): evsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.374366][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.382770][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.396903][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.399631][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.402485][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.409339][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.412263][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.416241][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.419191][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.423213][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.444612][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.447949][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.460409][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.460852][ T4311] device veth0_macvtap entered promiscuous mode [ 42.462657][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.467787][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.470755][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.473532][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.477871][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.482054][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.484865][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.493143][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.497274][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.501229][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.513634][ T4307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.516575][ T4307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.519073][ T4307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.521563][ T4307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.532757][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.536632][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.539620][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.542436][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.547795][ T4316] device veth0_vlan entered promiscuous mode [ 42.550200][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.552748][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.578977][ T4311] device veth1_macvtap entered promiscuous mode [ 42.630023][ T4316] device veth1_vlan entered promiscuous mode [ 42.635867][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.638888][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.641633][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.644528][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.647857][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.650797][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.654791][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.691542][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.694290][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.698493][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.702779][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.708905][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.730783][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.734105][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.738170][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.741165][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.743970][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.749269][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.755042][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.784288][ T4316] device veth0_macvtap entered promiscuous mode [ 42.788048][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.790841][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.805337][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.808606][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.828764][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.831014][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.837335][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.839546][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.844773][ T4311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.853047][ T4311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.858154][ T4311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.860611][ T4311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.864219][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.868986][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.871597][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.898300][ T4316] device veth1_macvtap entered promiscuous mode [ 42.922885][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.927593][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.929912][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.932501][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.948944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.951832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.954449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.996925][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.999789][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.002457][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.012073][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.014777][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.017833][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.020647][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.030533][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.034711][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.042544][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.047964][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.052273][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.056988][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.059684][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.062587][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.066555][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.069481][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.073367][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.079448][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.082093][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.088910][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.091712][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.109794][ T4316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.112265][ T4316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.120359][ T4316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.127922][ T4316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.191720][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.194282][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.244388][ T4427] mmap: syz.0.1 (4427) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.287733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.310332][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.312524][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.317286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.368380][ T4430] netem: incorrect gi model size [ 43.369972][ T4430] netem: change failed [ 43.446292][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.448631][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.464301][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.484352][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.492055][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.496467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.522791][ T4435] loop2: detected capacity change from 0 to 256 [ 43.528255][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 43.564865][ T4432] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 43.568910][ T4432] FAT-fs (loop2): Filesystem has been set read-only [ 43.995996][ T4458] device syzkaller0 entered promiscuous mode [ 44.015536][ T4313] Bluetooth: hci0: command 0x040f tx timeout [ 44.095849][ T4323] Bluetooth: hci3: command 0x040f tx timeout [ 44.098771][ T4313] Bluetooth: hci4: command 0x040f tx timeout [ 44.098882][ T4314] Bluetooth: hci2: command 0x040f tx timeout [ 44.100671][ T4313] Bluetooth: hci1: command 0x040f tx timeout [ 44.387964][ T4475] binder: 4473:4475 tried to acquire reference to desc 0, got 1 instead [ 44.390652][ T4475] binder: 4473:4475 got transaction with too large buffer [ 44.392689][ T4475] binder: 4473:4475 transaction call to 4473:0 failed 5/29201/-22, size 120-24 line 3513 [ 44.397802][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.508981][ T4482] loop4: detected capacity change from 0 to 16 [ 44.529716][ T4482] erofs: (device loop4): mounted with root inode @ nid 36. [ 44.620907][ T4316] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 44.630067][ T4316] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 44.633225][ T4316] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 45.150698][ T4489] loop4: detected capacity change from 0 to 32768 [ 45.172710][ T4489] ======================================================= [ 45.172710][ T4489] WARNING: The mand mount option has been deprecated and [ 45.172710][ T4489] and is ignored by this kernel. Remove the mand [ 45.172710][ T4489] option from the mount to silence this warning. [ 45.172710][ T4489] ======================================================= [ 45.256611][ T4501] fuse: root generation should be zero [ 45.272251][ T4489] XFS (loop4): Mounting V5 Filesystem [ 45.501792][ T4513] loop3: detected capacity change from 0 to 40427 [ 45.508205][ T4513] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 45.510359][ T4513] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.515975][ T4513] F2FS-fs (loop3): invalid crc value [ 45.540640][ T4513] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.572717][ T4489] XFS (loop4): Ending clean mount [ 45.580303][ T4513] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.582458][ T4513] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.620445][ T4489] XFS (loop4): Quotacheck needed: Please wait. [ 45.662925][ T4489] XFS (loop4): Quotacheck: Done. [ 45.883212][ T4513] syz.3.36: attempt to access beyond end of device [ 45.883212][ T4513] loop3: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 45.898192][ T4513] syz.3.36: attempt to access beyond end of device [ 45.898192][ T4513] loop3: rw=2049, sector=49152, nr_sectors = 1160 limit=40427 [ 45.919695][ T4316] XFS (loop4): Unmounting Filesystem [ 45.967433][ T4513] syz.3.36: attempt to access beyond end of device [ 45.967433][ T4513] loop3: rw=524288, sector=53248, nr_sectors = 256 limit=40427 [ 45.971756][ T4513] syz.3.36: attempt to access beyond end of device [ 45.971756][ T4513] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 45.976368][ T4513] syz.3.36: attempt to access beyond end of device [ 45.976368][ T4513] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 45.980477][ T4513] syz.3.36: attempt to access beyond end of device [ 45.980477][ T4513] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 45.984355][ T4513] syz.3.36: attempt to access beyond end of device [ 45.984355][ T4513] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 46.026560][ T4308] syz-executor: attempt to access beyond end of device [ 46.026560][ T4308] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.105167][ T4323] Bluetooth: hci0: command 0x0419 tx timeout [ 46.145042][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.175233][ T4309] Bluetooth: hci3: command 0x0419 tx timeout [ 46.175496][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 46.177001][ T4309] Bluetooth: hci4: command 0x0419 tx timeout [ 46.178564][ T4323] Bluetooth: hci1: command 0x0419 tx timeout [ 46.303454][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 46.313918][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.316706][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.329151][ T4315] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 46.331807][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.339519][ T4315] usb 1-1: config 0 descriptor?? [ 46.351753][ T4315] gspca_main: spca508-2.14.0 probing 8086:0110 [ 46.502200][ T4547] device syzkaller0 entered promiscuous mode [ 46.616106][ T4315] gspca_spca508: reg_read err -71 [ 46.620730][ T4315] gspca_spca508: reg_read err -71 [ 46.622607][ T4315] gspca_spca508: reg_read err -71 [ 46.625526][ T4315] gspca_spca508: reg_read err -71 [ 46.627763][ T4315] gspca_spca508: reg_read err -71 [ 46.632717][ T4315] gspca_spca508: reg write: error -71 [ 46.634271][ T4315] spca508: probe of 1-1:0.0 failed with error -71 [ 46.646233][ T4315] usb 1-1: USB disconnect, device number 2 [ 46.909945][ T4543] loop3: detected capacity change from 0 to 32768 [ 46.929075][ T4543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.43 (4543) [ 46.977957][ T4543] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.981274][ T4543] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 46.984713][ T4543] BTRFS info (device loop3): using free space tree [ 47.030175][ T4562] loop1: detected capacity change from 0 to 256 [ 47.043837][ T4562] FAT-fs (loop1): Directory bread(block 1285) failed [ 47.055103][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 47.101091][ T4576] block device autoloading is deprecated and will be removed. [ 47.143614][ T4543] BTRFS info (device loop3): enabling ssd optimizations [ 47.249627][ T4592] loop4: detected capacity change from 0 to 512 [ 47.264073][ T4592] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.298476][ T4592] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.354530][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 47.364829][ T4592] EXT4-fs (loop4): 1 truncate cleaned up [ 47.366585][ T4592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.382818][ T4543] kernel write not supported for file /infiniband/rdma_cm (pid: 4543 comm: syz.3.43) [ 47.452970][ T4308] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.698434][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 48.255320][ T4323] Bluetooth: hci4: command 0x0405 tx timeout [ 48.316443][ T4397] Bluetooth: hci5: Frame reassembly failed (-84) [ 48.318405][ T55] Bluetooth: hci5: Frame reassembly failed (-84) [ 48.324772][ T4644] loop1: detected capacity change from 0 to 512 [ 48.532581][ T4634] loop4: detected capacity change from 0 to 32768 [ 48.539143][ T4644] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.541115][ T4644] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.544693][ T4634] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.66 (4634) [ 48.555953][ T4644] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.71: bad orphan inode 131083 [ 48.559809][ T4644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.569261][ T4634] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.594251][ T4634] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 48.609237][ T4634] BTRFS info (device loop4): turning off barriers [ 48.618503][ T4634] BTRFS info (device loop4): setting nodatasum [ 48.628386][ T4634] BTRFS info (device loop4): use zlib compression, level 3 [ 48.638635][ T4634] BTRFS info (device loop4): using free space tree [ 48.740591][ T4307] EXT4-fs (loop1): unmounting filesystem. [ 48.854087][ T4316] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.347671][ T4679] loop4: detected capacity change from 0 to 32768 [ 49.368568][ T4679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.76 (4679) [ 49.394000][ T4679] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.402055][ T4679] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 49.404656][ T4679] BTRFS info (device loop4): using free space tree [ 49.482606][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.575108][ T4679] BTRFS info (device loop4): enabling ssd optimizations [ 49.607244][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.674866][ T4309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.678661][ T4309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.693686][ T4309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.699129][ T4309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.702275][ T4309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 49.704498][ T4309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.731725][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.828283][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.031313][ T4316] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.335037][ T4309] Bluetooth: hci5: command 0xfc11 tx timeout [ 50.336548][ T4313] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 50.337276][ T4309] Bluetooth: hci4: command 0x0405 tx timeout [ 50.508353][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 50.655423][ T4724] loop3: detected capacity change from 0 to 32768 [ 50.716259][ T4748] sctp: [Deprecated]: syz.4.91 (pid 4748) Use of int in max_burst socket option deprecated. [ 50.716259][ T4748] Use struct sctp_assoc_value instead [ 50.744550][ T4724] JBD2: Ignoring recovery information on journal [ 50.890308][ T4724] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 50.919684][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.921923][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.924729][ T4707] device bridge_slave_0 entered promiscuous mode [ 50.935774][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.957969][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.960853][ T4707] device bridge_slave_1 entered promiscuous mode [ 51.081978][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.097750][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.153653][ T4308] ocfs2: Unmounting device (7,3) on (node local) [ 51.214183][ T4707] team0: Port device team_slave_0 added [ 51.222144][ T4707] team0: Port device team_slave_1 added [ 51.295413][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.297367][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.305213][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.309622][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.311486][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.319555][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.457243][ T4707] device hsr_slave_0 entered promiscuous mode [ 51.505671][ T4707] device hsr_slave_1 entered promiscuous mode [ 51.526146][ T4707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.528407][ T4707] Cannot create hsr debugfs directory [ 51.775902][ T4313] Bluetooth: hci1: command 0x0409 tx timeout [ 51.874608][ T4794] loop2: detected capacity change from 0 to 1024 [ 51.882097][ T4794] EXT4-fs: Ignoring removed bh option [ 51.888113][ T4794] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.903269][ T4794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.990491][ T4793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 52.007774][ T4707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.063579][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 52.105916][ T4707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.168240][ T4707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.196902][ T4707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.669148][ T4835] loop3: detected capacity change from 0 to 4096 [ 52.675332][ T4835] EXT4-fs: Ignoring removed nobh option [ 52.695421][ T4835] EXT4-fs (loop3): Test dummy encryption mode enabled [ 52.748389][ T4835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.844085][ T4835] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 53.080632][ T55] device hsr_slave_0 left promiscuous mode [ 53.116886][ T55] device hsr_slave_1 left promiscuous mode [ 53.166311][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.168466][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.171533][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.175391][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.180765][ T55] device bridge_slave_1 left promiscuous mode [ 53.184145][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.237191][ T55] device bridge_slave_0 left promiscuous mode [ 53.239057][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.365844][ T55] device veth1_macvtap left promiscuous mode [ 53.368804][ T55] device veth0_macvtap left promiscuous mode [ 53.370628][ T55] device veth1_vlan left promiscuous mode [ 53.372376][ T55] device veth0_vlan left promiscuous mode [ 53.855318][ T4313] Bluetooth: hci1: command 0x041b tx timeout [ 55.239098][ T55] team0 (unregistering): Port device team_slave_1 removed [ 55.418383][ T55] team0 (unregistering): Port device team_slave_0 removed [ 55.615893][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.815733][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.935790][ T4313] Bluetooth: hci1: command 0x040f tx timeout [ 58.015137][ T4309] Bluetooth: hci1: command 0x0419 tx timeout [ 58.147810][ T55] bond0 (unregistering): Released all slaves [ 58.419822][ T4931] netlink: 'syz.4.123': attribute type 12 has an invalid length. [ 58.422046][ T4931] netlink: 'syz.4.123': attribute type 29 has an invalid length. [ 58.424186][ T4931] netlink: 148 bytes leftover after parsing attributes in process `syz.4.123'. [ 58.427153][ T4931] netlink: 'syz.4.123': attribute type 2 has an invalid length. [ 58.601944][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.610603][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 58.627996][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.630470][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.687694][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.709607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.712817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.727038][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.729071][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.741766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.758641][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.761589][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.764429][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.766489][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.855773][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.858773][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.861791][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.882933][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.892519][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.898004][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.900694][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.912102][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.943398][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.972733][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.985956][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.992295][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.054537][ T4957] loop0: detected capacity change from 0 to 128 [ 59.281470][ T4971] loop2: detected capacity change from 0 to 7 [ 59.293738][ T4315] Process accounting resumed [ 59.296012][ T4315] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 59.297366][ T4971] loop2: [ 59.298266][ T4315] FAT-fs (loop0): Filesystem has been set read-only [ 59.299323][ T4971] loop2: partition table partially beyond EOD, truncated [ 59.326178][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.330663][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.333322][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.339094][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.341655][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.344036][ T4309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.476141][ T4982] loop2: detected capacity change from 0 to 512 [ 59.484246][ T4982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.502097][ T4984] kernel profiling enabled (shift: 7) [ 59.552669][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.560930][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.563289][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.604617][ T4982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.631708][ T4984] loop4: detected capacity change from 0 to 8 [ 59.662819][ T4984] squashfs: Unknown parameter '01777777777777777777777' [ 59.747211][ T4982] process 'syz.2.135' launched './file3' with NULL argv: empty string added [ 60.070228][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 60.360387][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.446162][ T4974] chnl_net:caif_netlink_parms(): no params data found [ 60.545337][ T5043] loop4: detected capacity change from 0 to 512 [ 60.581352][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.593216][ T5043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.626475][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.629234][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.729212][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.762642][ T5053] netlink: 96 bytes leftover after parsing attributes in process `syz.2.152'. [ 60.852259][ T5043] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.150: Invalid inode table block 0 in block_group 0 [ 60.859469][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.881078][ T5063] syz.0.156 sent an empty control message without MSG_MORE. [ 60.891576][ T4707] device veth0_vlan entered promiscuous mode [ 60.899078][ T4974] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.901113][ T4974] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.903624][ T4974] device bridge_slave_0 entered promiscuous mode [ 60.942996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.946756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.952515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.958123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.965964][ T4316] EXT4-fs (loop4): unmounting filesystem. [ 60.973561][ T4707] device veth1_vlan entered promiscuous mode [ 60.986762][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.989391][ T4974] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.996846][ T4974] device bridge_slave_1 entered promiscuous mode [ 61.133578][ T4707] device veth0_macvtap entered promiscuous mode [ 61.149094][ T4974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.152191][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.154893][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.190762][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.193675][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.204703][ T4707] device veth1_macvtap entered promiscuous mode [ 61.209337][ T4974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.214786][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.220866][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.375307][ T4313] Bluetooth: hci2: command 0x0409 tx timeout [ 61.403038][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.409633][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.412478][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.418340][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.421050][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.435014][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.437851][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.440728][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.445887][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.463729][ T4974] team0: Port device team_slave_0 added [ 61.490748][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.493632][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.506763][ T4974] team0: Port device team_slave_1 added [ 61.517662][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.520824][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.523713][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.540726][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.554290][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.567421][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.570244][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.573097][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.592591][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.751277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.754142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.759338][ T4707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.761755][ T4707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.764586][ T4707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.775229][ T4707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.779116][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.781151][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.800217][ T4974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.822924][ T5096] loop2: detected capacity change from 0 to 4096 [ 61.858443][ T5096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.980556][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.982568][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.995221][ T4974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.101483][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 62.143446][ T5096] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.164: Invalid inode table block 4 in block_group 0 [ 62.265588][ T11] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm kworker/u4:1: Invalid inode table block 4 in block_group 0 [ 62.282831][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 62.396852][ T4974] device hsr_slave_0 entered promiscuous mode [ 62.435589][ T4974] device hsr_slave_1 entered promiscuous mode [ 62.465183][ T4974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.467508][ T4974] Cannot create hsr debugfs directory [ 62.553734][ T4309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.565451][ T4309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.570228][ T4309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.575408][ T1592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.577712][ T1592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.649407][ T4309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.653236][ T4309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.679422][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.682565][ T4309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.885533][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.887867][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.011836][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.289945][ T5148] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 63.408691][ T5151] loop2: detected capacity change from 0 to 256 [ 63.455153][ T4313] Bluetooth: hci2: command 0x041b tx timeout [ 63.682166][ T5165] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 63.809107][ T5174] overlayfs: failed to clone upperpath [ 63.818931][ T5149] loop5: detected capacity change from 0 to 40427 [ 63.824196][ T5149] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 63.829417][ T5149] F2FS-fs (loop5): invalid crc value [ 63.833177][ T5149] F2FS-fs (loop5): Found nat_bits in checkpoint [ 63.871860][ T5149] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 63.934668][ T4974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.973839][ T4974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.008397][ T5149] syz.5.79: attempt to access beyond end of device [ 64.008397][ T5149] loop5: rw=34817, sector=77824, nr_sectors = 16 limit=40427 [ 64.086067][ T4707] syz-executor: attempt to access beyond end of device [ 64.086067][ T4707] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.331714][ T4974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.374115][ T4974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.442916][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'. [ 64.473180][ T5195] netlink: 'syz.5.184': attribute type 12 has an invalid length. [ 64.475733][ T5195] netlink: 'syz.5.184': attribute type 29 has an invalid length. [ 64.478186][ T5195] netlink: 148 bytes leftover after parsing attributes in process `syz.5.184'. [ 64.493406][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 64.548102][ T55] device hsr_slave_0 left promiscuous mode [ 64.595360][ T55] device hsr_slave_1 left promiscuous mode [ 64.685689][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.688061][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.690932][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.694329][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.702117][ T55] device bridge_slave_1 left promiscuous mode [ 64.707539][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.735058][ T4313] Bluetooth: hci4: command 0x0409 tx timeout [ 64.756336][ T55] device bridge_slave_0 left promiscuous mode [ 64.758155][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.885282][ T55] device veth1_macvtap left promiscuous mode [ 64.887163][ T55] device veth0_macvtap left promiscuous mode [ 64.889272][ T55] device veth1_vlan left promiscuous mode [ 64.890955][ T55] device veth0_vlan left promiscuous mode [ 64.964491][ T5223] Invalid ELF header magic: != ELF [ 65.535050][ T4313] Bluetooth: hci2: command 0x040f tx timeout [ 66.655231][ T55] team0 (unregistering): Port device team_slave_1 removed [ 66.823234][ T4309] Bluetooth: hci4: command 0x041b tx timeout [ 66.891105][ T5277] overlayfs: failed to clone upperpath [ 66.897472][ T55] team0 (unregistering): Port device team_slave_0 removed [ 67.066439][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.267329][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.615212][ T4313] Bluetooth: hci2: command 0x0419 tx timeout [ 68.905033][ T4309] Bluetooth: hci4: command 0x040f tx timeout [ 68.963358][ T5295] overlayfs: statfs failed on './file0' [ 69.428146][ T5302] loop2: detected capacity change from 0 to 32768 [ 69.451842][ T5302] XFS (loop2): Mounting V5 Filesystem [ 69.502069][ T5302] XFS (loop2): Ending clean mount [ 69.508711][ T5302] XFS (loop2): Quotacheck needed: Please wait. [ 69.521175][ T1592] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x14c/0x220, xfs_agfl block 0x3 [ 69.528068][ T1592] XFS (loop2): Unmount and run xfs_repair [ 69.529658][ T1592] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 69.531892][ T1592] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 69.534397][ T1592] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 69.547699][ T1592] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 69.550293][ T1592] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 69.552777][ T1592] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.555298][ T1592] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.558594][ T1592] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.561591][ T1592] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.564355][ T1592] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x19c/0x330" at daddr 0x3 len 1 error 74 [ 69.571622][ T5302] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 69.617579][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.619599][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.619625][ T14] cfg80211: failed to load regulatory.db [ 69.638619][ T4311] XFS (loop2): Unmounting Filesystem [ 69.717738][ T55] bond0 (unregistering): Released all slaves [ 70.046437][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 70.052671][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 70.295199][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 70.507816][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.511242][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.541727][ T5114] device bridge_slave_0 entered promiscuous mode [ 70.590605][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.600483][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.603287][ T5114] device bridge_slave_1 entered promiscuous mode [ 70.653310][ T5340] loop2: detected capacity change from 0 to 1024 [ 70.665300][ T5340] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.672453][ T5341] overlayfs: failed to clone upperpath [ 70.689388][ T4974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.734791][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.780451][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.791139][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.803088][ T4974] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.813563][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.831216][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.950243][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.953603][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.975048][ T4313] Bluetooth: hci4: command 0x0419 tx timeout [ 70.975998][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.978730][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.984820][ T5340] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.229: Invalid inode table block 42914479797866818 in block_group 0 [ 70.991255][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.995658][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.012463][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.014435][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.017431][ T5340] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.229: Invalid inode table block 42914479797866818 in block_group 0 [ 71.023817][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.032756][ T5340] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 71.036053][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.049109][ T5340] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #12: comm syz.2.229: mark_inode_dirty error [ 71.053375][ T5114] team0: Port device team_slave_0 added [ 71.078551][ T5114] team0: Port device team_slave_1 added [ 71.115561][ T11] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm kworker/u4:1: Invalid inode table block 42914479797866818 in block_group 0 [ 71.121389][ T4311] EXT4-fs (loop2): unmounting filesystem. [ 71.149250][ T4974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.152188][ T4974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.185957][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.192209][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.205347][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.216441][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.222862][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.230865][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.237381][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.256602][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.264056][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.274398][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.282916][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.389043][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.391022][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.418461][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.445047][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 71.498044][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.500117][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.529458][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.607082][ T5114] device hsr_slave_0 entered promiscuous mode [ 71.631340][ T5114] device hsr_slave_1 entered promiscuous mode [ 71.675051][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.678062][ T5114] Cannot create hsr debugfs directory [ 71.683460][ T5368] device macvlan2 entered promiscuous mode [ 71.687785][ T5368] bond1: (slave macvlan2): Opening slave failed [ 71.927818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.930150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.965854][ T4974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.983031][ T5114] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.236947][ T5114] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.267997][ T5114] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 72.326888][ T5114] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 72.374256][ T5381] overlayfs: failed to clone upperpath [ 72.553121][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.589670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.592731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.599176][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.617314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.620172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.623181][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.625337][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.646290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.672500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.681773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.690704][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.692667][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.703648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.708138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.717787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.721062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.728425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.733095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.762460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.770990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.780959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.790560][ T5114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.793438][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.813830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.822602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.838592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.841709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.851339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.861836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.871725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.876656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.879650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.887835][ T4974] device veth0_vlan entered promiscuous mode [ 72.912432][ T4974] device veth1_vlan entered promiscuous mode [ 72.970725][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.973555][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.983920][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.990159][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.996773][ T4974] device veth0_macvtap entered promiscuous mode [ 73.003129][ T4974] device veth1_macvtap entered promiscuous mode [ 73.019015][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.033897][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.040299][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.048038][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.054241][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.061108][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.068249][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.071229][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.079210][ T4974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.089686][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.100874][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.107544][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.113868][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.120164][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.126644][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.131567][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.137284][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.141698][ T4974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.146279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.150164][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.153024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.163378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.168228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.171120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.185332][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.190175][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.192479][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.196540][ T4974] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.199420][ T4974] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.202590][ T4974] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.207716][ T4974] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.315387][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.336675][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.341661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.362548][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.366102][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.381335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.677089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.679969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.760638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.763489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.769421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.771984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.776184][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.5.253'. [ 73.801288][ T5114] device veth0_vlan entered promiscuous mode [ 73.823212][ T5114] device veth1_vlan entered promiscuous mode [ 73.847225][ T5481] Zero length message leads to an empty skb [ 73.889447][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.892089][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.894771][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.903288][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.913006][ T5114] device veth0_macvtap entered promiscuous mode [ 73.923423][ T5114] device veth1_macvtap entered promiscuous mode [ 73.941658][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.944815][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.949773][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.962341][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.966810][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.969739][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.981302][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.986647][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.990698][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.994730][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.007561][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.032596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.036794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.039824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.042667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.054440][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.058029][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.060721][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.076831][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.079621][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.082561][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.103948][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.111766][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.114515][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.122099][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.130682][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.141113][ T5114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.143810][ T5114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.150154][ T5114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.153539][ T5114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.159083][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 74.166585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.169558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.199636][ T5495] device veth3 entered promiscuous mode [ 74.201398][ T5495] bridge3: port 1(veth3) entered blocking state [ 74.203207][ T5495] bridge3: port 1(veth3) entered disabled state [ 74.315177][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.323702][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.336128][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.360818][ T5005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.363237][ T5005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.374173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.578078][ T5511] loop7: detected capacity change from 0 to 1024 [ 74.647726][ T5511] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 74.731349][ T5511] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.166: Freeing blocks not in datazone - block = 0, count = 16 [ 74.776147][ T5511] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 74.785518][ T5511] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 74.788966][ T5511] EXT4-fs (loop7): This should not happen!! Data will be lost [ 74.788966][ T5511] [ 74.791823][ T5511] EXT4-fs (loop7): Total free blocks count 0 [ 74.796306][ T5511] EXT4-fs (loop7): Free/Dirty block details [ 74.798053][ T5511] EXT4-fs (loop7): free_blocks=4293918720 [ 74.799652][ T5511] EXT4-fs (loop7): dirty_blocks=16 [ 74.801072][ T5511] EXT4-fs (loop7): Block reservation details [ 74.802752][ T5511] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 74.934207][ T5511] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 75.017277][ T5541] tipc: Started in network mode [ 75.024510][ T5541] tipc: Node identity 7, cluster identity 4711 [ 75.030424][ T5541] tipc: Node number set to 7 [ 75.213983][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.272'. [ 75.772445][ T5562] loop7: detected capacity change from 0 to 128 [ 76.058207][ T5591] device team_slave_0 entered promiscuous mode [ 76.261819][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.290'. [ 76.403074][ T5608] loop7: detected capacity change from 0 to 8192 [ 76.454432][ T5608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.464149][ T5608] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 76.526496][ T5608] REISERFS (device loop7): using ordered data mode [ 76.528950][ T5608] reiserfs: using flush barriers [ 76.544813][ T5608] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.576793][ T5608] REISERFS (device loop7): checking transaction log (loop7) [ 76.607940][ T5608] REISERFS (device loop7): Using rupasov hash to sort names [ 76.641725][ T5608] REISERFS (device loop7): using 3.5.x disk format [ 76.675105][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.678533][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.681619][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.684671][ T5608] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 76.703675][ T5620] loop6: detected capacity change from 0 to 2048 [ 76.731565][ T5608] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 76.802287][ T5633] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.859327][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.862809][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.894573][ T5620] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 76.909817][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.913202][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.927873][ T5608] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.931024][ T5608] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 76.940778][ T5620] Remounting filesystem read-only [ 76.992807][ T5620] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 77.073609][ T5608] REISERFS error (device loop7): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 77.095158][ T5608] REISERFS (device loop7): Remounting filesystem read-only [ 77.191108][ T5647] netlink: 24 bytes leftover after parsing attributes in process `syz.6.303'. [ 77.748826][ T5683] loop7: detected capacity change from 0 to 4096 [ 77.777859][ T5683] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 77.782221][ T5683] EXT4-fs (loop7): unmounting filesystem. [ 78.059049][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 78.116461][ T5702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.118963][ T5702] IPv6: NLM_F_CREATE should be set when creating new route [ 78.122180][ T5702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.124109][ T5702] IPv6: NLM_F_CREATE should be set when creating new route [ 78.260095][ T5712] syz.6.320 uses obsolete (PF_INET,SOCK_PACKET) [ 78.354138][ T5721] loop7: detected capacity change from 0 to 512 [ 78.444412][ T5721] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 78.808688][ T5748] 9pnet_fd: Insufficient options for proto=fd [ 78.834662][ T11] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 78.862350][ T11] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 78.882227][ T5750] loop6: detected capacity change from 0 to 128 [ 78.905633][ T5114] EXT4-fs (loop7): unmounting filesystem. [ 78.908501][ T5114] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 78.918183][ T5114] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 78.926010][ T5114] EXT4-fs error (device loop7): ext4_quota_off:7120: inode #4: comm syz-executor: mark_inode_dirty error [ 78.955759][ T5754] tipc: Started in network mode [ 78.957852][ T5754] tipc: Node identity c, cluster identity 4711 [ 78.966076][ T5754] tipc: Node number set to 12 [ 81.644411][ T5887] loop7: detected capacity change from 0 to 1024 [ 81.678312][ T5887] EXT4-fs: Ignoring removed orlov option [ 81.679861][ T5887] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.704659][ T5887] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 81.904861][ T5114] EXT4-fs (loop7): unmounting filesystem. [ 81.918083][ T5898] loop6: detected capacity change from 0 to 4096 [ 81.921257][ T5898] ntfs: (device loop6): parse_options(): Unrecognized mount option @. [ 81.965265][ T4935] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.981273][ T5901] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.217632][ T5915] capability: warning: `syz.5.377' uses deprecated v2 capabilities in a way that may be insecure [ 82.425634][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.383'. [ 82.442628][ T5926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.492590][ T5926] device macvlan2 entered promiscuous mode [ 82.508838][ T5926] device bond1 entered promiscuous mode [ 82.533770][ T5926] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.586215][ T5926] device bond1 left promiscuous mode [ 82.684042][ T27] audit: type=1326 audit(82.660:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.690382][ T27] audit: type=1326 audit(82.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.705016][ T27] audit: type=1326 audit(82.660:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.710796][ T27] audit: type=1326 audit(82.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.725128][ T27] audit: type=1326 audit(82.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.731015][ T27] audit: type=1326 audit(82.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.761941][ T27] audit: type=1326 audit(82.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.775144][ T27] audit: type=1326 audit(82.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 82.785671][ T27] audit: type=1326 audit(82.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.6.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615af28 code=0x7fc00000 [ 83.290815][ T5951] loop7: detected capacity change from 0 to 256 [ 83.350857][ T5951] MINIX-fs: mounting file system with errors, running fsck is recommended [ 84.592017][ T5991] binder: 5988:5991 tried to acquire reference to desc 0, got 1 instead [ 84.599075][ T5991] binder: 5988:5991 got transaction with fd, 4, but target does not allow fds [ 84.602132][ T5991] binder: 5991:5988 translate fd failed [ 84.603862][ T5991] binder: 5988:5991 transaction async to 5988:0 failed 10/29201/-1, size 72-24 line 3424 [ 84.608570][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.014489][ T6008] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 85.082045][ T6012] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 85.127019][ T6012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.130807][ T6012] team0: Failed to send port change of device bond0 via netlink (err -105) [ 85.133546][ T6012] team0: Failed to send options change via netlink (err -105) [ 85.144770][ T6012] team0: Port device bond0 added [ 85.423757][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.417'. [ 85.447590][ T6028] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 85.450906][ T6028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 85.710896][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.425'. [ 86.136391][ T6076] netlink: 140 bytes leftover after parsing attributes in process `syz.6.434'. [ 86.139255][ T6076] netlink: 140 bytes leftover after parsing attributes in process `syz.6.434'. [ 86.146602][ T6076] netlink: 140 bytes leftover after parsing attributes in process `syz.6.434'. [ 88.393870][ T4313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.400180][ T4313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.403538][ T4313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.406593][ T4313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.409146][ T4313] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.411392][ T4313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.769194][ T6114] netlink: 'syz.5.445': attribute type 10 has an invalid length. [ 88.771426][ T6114] netlink: 40 bytes leftover after parsing attributes in process `syz.5.445'. [ 88.775963][ T6114] device batadv0 entered promiscuous mode [ 88.795029][ T6114] bridge0: port 3(batadv0) entered blocking state [ 88.801234][ T6114] bridge0: port 3(batadv0) entered disabled state [ 88.818902][ T6114] bridge0: port 3(batadv0) entered blocking state [ 88.821180][ T6114] bridge0: port 3(batadv0) entered forwarding state [ 88.939032][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 88.939044][ T27] audit: type=1326 audit(88.920:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.449" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f95af28 code=0x0 [ 89.118039][ T39] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 89.120821][ T39] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 89.149004][ T5005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.396610][ T5005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.527023][ T5005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.537721][ T6109] chnl_net:caif_netlink_parms(): no params data found [ 89.647203][ T5005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.689388][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.693980][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.704729][ T6109] device bridge_slave_0 entered promiscuous mode [ 89.715857][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.718282][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.720857][ T6109] device bridge_slave_1 entered promiscuous mode [ 89.799762][ T6109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.804543][ T6109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.002175][ T6109] team0: Port device team_slave_0 added [ 90.054079][ T6109] team0: Port device team_slave_1 added [ 90.109057][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.110974][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.151584][ T6109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.159047][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.160961][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.195046][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.415551][ T6109] device hsr_slave_0 entered promiscuous mode [ 90.465543][ T6109] device hsr_slave_1 entered promiscuous mode [ 90.495134][ T4313] Bluetooth: hci5: command 0x0409 tx timeout [ 90.495270][ T6109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.499527][ T6109] Cannot create hsr debugfs directory [ 90.502901][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.7.458'. [ 90.702111][ T6186] tipc: Enabled bearer , priority 0 [ 90.771160][ T6175] tipc: Resetting bearer [ 90.841181][ T6199] loop7: detected capacity change from 0 to 512 [ 90.852493][ T6199] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.859146][ T6199] EXT4-fs: inline encryption not supported [ 90.863127][ T6199] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.866887][ T6175] tipc: Disabling bearer [ 90.886389][ T6199] EXT4-fs (loop7): Test dummy encryption mode enabled [ 90.888571][ T6199] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 90.907294][ T6203] overlayfs: failed to clone upperpath [ 90.926827][ T6199] EXT4-fs (loop7): 1 truncate cleaned up [ 90.934316][ T6199] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 90.997663][ T6199] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 91.319965][ T6109] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 91.341774][ T5114] EXT4-fs (loop7): unmounting filesystem. [ 91.450201][ T6109] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 91.544350][ T6109] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 91.553114][ T6227] loop7: detected capacity change from 0 to 128 [ 91.567111][ T6109] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 91.592604][ T6227] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 91.714714][ T6241] 9pnet_fd: Insufficient options for proto=fd [ 91.784573][ T5114] EXT4-fs (loop7): unmounting filesystem. [ 92.260742][ T5005] device hsr_slave_0 left promiscuous mode [ 92.310204][ T5005] device hsr_slave_1 left promiscuous mode [ 92.385306][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.387426][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.395467][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.397466][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.413555][ T5005] device bridge_slave_1 left promiscuous mode [ 92.415506][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.473895][ T5005] device bridge_slave_0 left promiscuous mode [ 92.475949][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.575177][ T4313] Bluetooth: hci5: command 0x041b tx timeout [ 92.605934][ T5005] device veth1_macvtap left promiscuous mode [ 92.607761][ T5005] device veth0_macvtap left promiscuous mode [ 92.609742][ T5005] device veth1_vlan left promiscuous mode [ 92.612066][ T5005] device veth0_vlan left promiscuous mode [ 92.875133][ T5005] bond1 (unregistering): Released all slaves [ 94.655052][ T4313] Bluetooth: hci5: command 0x040f tx timeout [ 94.763185][ T5005] team0 (unregistering): Port device team_slave_1 removed [ 94.936842][ T5005] team0 (unregistering): Port device team_slave_0 removed [ 95.147035][ T5005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.367485][ T5005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.735172][ T4313] Bluetooth: hci5: command 0x0419 tx timeout [ 97.853772][ T5005] bond0 (unregistering): Released all slaves [ 98.090901][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.093651][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.477'. [ 98.190775][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.480'. [ 98.263784][ T6309] binder: 6308:6309 tried to acquire reference to desc 0, got 1 instead [ 98.268121][ T6300] netlink: 'syz.7.484': attribute type 4 has an invalid length. [ 98.295711][ T6309] binder: 6308:6309 not enough space to store 5 fds in buffer [ 98.297647][ T6309] binder: 6309:6308 translate fd array failed [ 98.299401][ T6309] binder: 6308:6309 transaction call to 6308:0 failed 17/29201/-22, size 176-136 line 3495 [ 98.320719][ T6301] netlink: 'syz.7.484': attribute type 4 has an invalid length. [ 98.352515][ T6109] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.355474][ T4355] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.366497][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.375496][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.419626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.422928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.456536][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.458535][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.461278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.513187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.516187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.518775][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.520714][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.523157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.547856][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.589547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.610835][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.622659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.638797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.650590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.657898][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.679718][ T6109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.685686][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.688663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.692587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.709537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.047842][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.050074][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.087064][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.893377][ T6360] loop6: detected capacity change from 0 to 64 [ 100.362997][ T6382] netlink: 'syz.0.503': attribute type 11 has an invalid length. [ 100.476239][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.5.505'. [ 100.556858][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.560618][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.579990][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.583631][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.595709][ T6109] device veth0_vlan entered promiscuous mode [ 100.600950][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.606728][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.618923][ T6109] device veth1_vlan entered promiscuous mode [ 100.718520][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 100.757112][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.783986][ T6109] device veth0_macvtap entered promiscuous mode [ 100.799194][ T6109] device veth1_macvtap entered promiscuous mode [ 100.802618][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.806331][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.809040][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.816504][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.823024][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.835300][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.895525][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.901865][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.921781][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.924708][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.955158][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.958336][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.961210][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.964196][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.967295][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.970321][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.973907][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.978630][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.984123][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.990056][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.994672][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.002022][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.008503][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.011374][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.014362][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.035128][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.045979][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.088409][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.091308][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.093979][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.114097][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.156465][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.163725][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.168057][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.191372][ T6109] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.193834][ T6109] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.206629][ T6109] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.209056][ T6109] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.313715][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.317273][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.322401][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.403810][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.407019][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.412675][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.524095][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.512'. [ 101.695597][ T6441] loop8: detected capacity change from 0 to 4096 [ 101.763171][ T6441] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 102.053667][ T6462] binder: 6458:6462 ioctl c0306201 20000080 returned -14 [ 102.089485][ T6462] binder: 6458:6462 tried to acquire reference to desc 0, got 1 instead [ 102.098147][ T6462] binder: 6458:6462 got transaction with invalid parent offset [ 102.098639][ T6109] EXT4-fs (loop8): unmounting filesystem. [ 102.101555][ T6462] binder: 6462:6458 failed to fixup parent [ 102.103732][ T6462] binder: 6458:6462 transaction async to 6458:0 failed 22/29201/-22, size 104-24 line 3549 [ 102.113982][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.242868][ T6471] loop7: detected capacity change from 0 to 256 [ 102.285708][ T6473] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 102.321460][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.332393][ T6471] netlink: 277 bytes leftover after parsing attributes in process `syz.7.523'. [ 102.499667][ T6473] bond1: (slave vlan3): making interface the new active one [ 102.511710][ T6473] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 102.524022][ T6487] loop6: detected capacity change from 0 to 512 [ 102.535197][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 102.573833][ T6487] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 102.862906][ T6500] netlink: 'syz.7.530': attribute type 1 has an invalid length. [ 102.997469][ T6500] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 103.025797][ T6500] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 103.058800][ T6500] bond1: (slave vcan1): making interface the new active one [ 103.069080][ T6500] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 103.121575][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.530'. [ 103.207141][ T6500] bond1: (slave vcan1): Releasing backup interface [ 103.236248][ T6500] bond1: Destroying bond [ 103.240692][ T6500] bond1 (unregistering): Released all slaves [ 103.295777][ T6523] device macvtap1 entered promiscuous mode [ 103.500776][ T6537] loop7: detected capacity change from 0 to 764 [ 103.552473][ T6537] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 103.897095][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.913028][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.954159][ T6558] netlink: 'syz.7.544': attribute type 12 has an invalid length. [ 103.961298][ T6521] loop6: detected capacity change from 0 to 32768 [ 104.582147][ T6588] loop8: detected capacity change from 0 to 64 [ 104.765906][ T6588] netlink: 64 bytes leftover after parsing attributes in process `syz.8.554'. [ 104.826988][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.218764][ T6618] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 106.077734][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.276089][ T6637] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 106.456821][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.7.568'. [ 106.689387][ T5005] batman_adv: batadv0: IGMP Querier appeared [ 107.131629][ T6677] netlink: 'syz.5.575': attribute type 1 has an invalid length. [ 107.133951][ T6677] netlink: 'syz.5.575': attribute type 4 has an invalid length. [ 107.148442][ T6677] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.575'. [ 107.161301][ T6677] netlink: 'syz.5.575': attribute type 1 has an invalid length. [ 107.163463][ T6677] netlink: 'syz.5.575': attribute type 4 has an invalid length. [ 107.174217][ T6677] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.575'. [ 107.555967][ T6691] binder: 6690:6691 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 107.572373][ T6691] binder: 6690:6691 ioctl c0306201 0 returned -14 [ 107.604356][ T6692] netlink: 'syz.5.578': attribute type 10 has an invalid length. [ 107.983839][ T6712] tipc: Started in network mode [ 107.991335][ T6712] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 107.993899][ T6712] tipc: Enabling of bearer rejected, failed to enable media [ 108.290978][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.588'. [ 109.932310][ T6771] binder: 6769:6771 tried to acquire reference to desc 0, got 1 instead [ 109.961029][ T6771] binder: 6769:6771 got transaction with invalid data ptr [ 109.966488][ T6771] binder: 6769:6771 transaction call to 6769:0 failed 29/29201/-14, size 112-136 line 3342 [ 109.976741][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.274045][ T6792] binder: 6791:6792 tried to acquire reference to desc 0, got 1 instead [ 110.279212][ T6792] binder: 6791:6792 got transaction with invalid parent offset or type [ 110.291864][ T6792] binder: 6791:6792 transaction async to 6791:0 failed 34/29201/-22, size 56-24 line 3448 [ 110.298845][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.344076][ T6798] netlink: 'syz.8.608': attribute type 12 has an invalid length. [ 110.429808][ T6802] binder: 6801:6802 tried to acquire reference to desc 0, got 1 instead [ 110.432714][ T6802] binder: 6801:6802 got transaction with invalid offsets size, 188 [ 110.445109][ T6802] binder: 6801:6802 transaction async to 6801:0 failed 39/29201/-22, size 0-188 line 3286 [ 110.448938][ T6802] binder: 6801:6802 ioctl c0306201 200001c0 returned -14 [ 110.453801][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.742027][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.8.617'. [ 110.877788][ T6835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.043330][ T6841] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 111.794147][ T6845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.797078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.871379][ T6848] binder: 6846:6848 tried to acquire reference to desc 0, got 1 instead [ 111.883451][ T6848] binder: 6846:6848 ioctl c0306201 20000380 returned -14 [ 111.925161][ T22] binder: undelivered transaction 44, process died. [ 112.202517][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.636'. [ 112.335239][ T4309] Bluetooth: hci0: command 0x0406 tx timeout [ 112.886683][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.896571][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.904112][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.915185][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.923461][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.939430][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.949574][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.968468][ T6917] binder: 6916:6917 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.983110][ T6917] binder: 6917 RLIMIT_NICE not set [ 113.022895][ T6922] binder: 6916:6922 tried to acquire reference to desc 0, got 1 instead [ 113.028295][ T6917] binder: undelivered transaction 49, put_user failed [ 113.030206][ T6917] binder: 6916:6917 ioctl c0306201 20000280 returned -14 [ 113.054058][ T22] binder: undelivered TRANSACTION_COMPLETE [ 113.301711][ T6938] netlink: 60 bytes leftover after parsing attributes in process `syz.6.648'. [ 113.527907][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.654'. [ 114.132291][ T6963] loop8: detected capacity change from 0 to 8192 [ 114.180916][ T6963] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.184516][ T6963] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 114.193906][ T6963] REISERFS (device loop8): using ordered data mode [ 114.195975][ T6963] reiserfs: using flush barriers [ 114.206526][ T6963] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.218139][ T6963] REISERFS (device loop8): checking transaction log (loop8) [ 114.222353][ T6963] REISERFS (device loop8): Using r5 hash to sort names [ 114.230716][ T6963] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 114.494134][ T6997] binder: 6996:6997 tried to acquire reference to desc 0, got 1 instead [ 114.522656][ T6997] binder: cannot allocate buffer [ 114.719525][ T7015] netlink: 188 bytes leftover after parsing attributes in process `syz.5.672'. [ 114.950241][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.089951][ T7030] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 115.700897][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.706314][ T7053] loop8: detected capacity change from 0 to 8192 [ 115.771337][ T7053] device bond0 entered promiscuous mode [ 115.773095][ T7053] device bond_slave_0 entered promiscuous mode [ 115.775465][ T7053] device bond_slave_1 entered promiscuous mode [ 115.781009][ T7057] loop6: detected capacity change from 0 to 1024 [ 115.799627][ T7057] EXT4-fs: Ignoring removed i_version option [ 115.875746][ T7057] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.684: Invalid block bitmap block 0 in block_group 0 [ 115.912317][ T7057] Quota error (device loop6): write_blk: dquota write failed [ 115.914729][ T7057] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 115.925324][ T7057] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.684: Failed to acquire dquot type 0 [ 115.952834][ T7057] EXT4-fs error (device loop6): ext4_free_blocks:6210: comm syz.6.684: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.024399][ T7057] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.684: Invalid inode bitmap blk 0 in block_group 0 [ 116.041052][ T5005] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 116.045760][ T5005] EXT4-fs error (device loop6): ext4_release_dquot:6850: comm kworker/u4:9: Failed to release dquot type 0 [ 116.062240][ T7057] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 116.078180][ T7057] EXT4-fs (loop6): 1 orphan inode deleted [ 116.079904][ T7057] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 116.331130][ T4974] EXT4-fs (loop6): unmounting filesystem. [ 116.376965][ T11] batman_adv: batadv0: MLD Querier appeared [ 116.614157][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000083fb8d2c: rx timeout, send abort [ 116.619361][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x0000000083fb8d2c: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.954255][ T7100] binder: 7099:7100 tried to acquire reference to desc 0, got 1 instead [ 116.971857][ T7100] binder: 7099:7100 got transaction with invalid offset (24, min 24 max 32) or object. [ 116.996029][ T7100] binder_debug: 2 callbacks suppressed [ 116.996042][ T7100] binder: 7099:7100 transaction async to 7099:0 failed 59/29201/-22, size 32-24 line 3355 [ 117.006522][ T4722] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.134496][ T7109] loop2: detected capacity change from 0 to 7 [ 117.166094][ T7109] loop2: [ 117.167078][ T7109] loop2: partition table partially beyond EOD, truncated [ 118.311429][ T7133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.313549][ T7133] IPv6: NLM_F_CREATE should be set when creating new route [ 118.486435][ T7142] binder: BINDER_SET_CONTEXT_MGR already set [ 118.505102][ T7142] binder: 7141:7142 ioctl 4018620d 20000040 returned -16 [ 118.519489][ T7142] binder: 7141:7142 got transaction to invalid handle, 1 [ 118.521809][ T7142] binder: 7142:7141 cannot find target node [ 118.523486][ T7142] binder: 7141:7142 transaction async to 0:0 failed 62/29201/-22, size 104-24 line 3054 [ 119.324803][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.365466][ T7127] ceph: No mds server is up or the cluster is laggy [ 119.391420][ T27] audit: type=1326 audit(119.369:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb515af28 code=0x7ffc0000 [ 119.399742][ T27] audit: type=1326 audit(119.379:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=282 compat=0 ip=0xffffb515af28 code=0x7ffc0000 [ 119.455063][ T27] audit: type=1326 audit(119.379:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb515af28 code=0x7ffc0000 [ 119.474829][ T27] audit: type=1326 audit(119.379:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffb515af28 code=0x7ffc0000 [ 119.499615][ T27] audit: type=1326 audit(119.379:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb515af28 code=0x7ffc0000 [ 119.569163][ T27] audit: type=1326 audit(119.379:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb5159454 code=0x7ffc0000 [ 119.605049][ T27] audit: type=1326 audit(119.379:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb515ca8c code=0x7ffc0000 [ 120.719107][ T7169] tipc: Started in network mode [ 120.736337][ T7169] tipc: Node identity bed9751a83b2, cluster identity 4711 [ 120.755280][ T7169] tipc: Enabled bearer , priority 0 [ 120.769503][ T7165] tipc: Resetting bearer [ 120.904261][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 121.888942][ T4354] tipc: Node number set to 1030452506 [ 123.149849][ T7232] net_ratelimit: 1 callbacks suppressed [ 123.149863][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.153844][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.156783][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.162117][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.164479][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.252430][ T7236] fuse: Bad value for 'fd' [ 123.295526][ T7238] overlayfs: failed to clone upperpath [ 123.364167][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 125.936004][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.056619][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.058523][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.633909][ T7165] tipc: Disabling bearer [ 132.962093][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.740'. [ 132.997184][ T7268] loop8: detected capacity change from 0 to 128 [ 133.007807][ T7266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.023783][ T7266] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 133.031732][ T7266] device macvlan2 entered promiscuous mode [ 133.034233][ T7266] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 133.061073][ T7268] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 133.261753][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 133.560960][ T6109] EXT4-fs (loop8): unmounting filesystem. [ 134.103976][ T7291] netlink: 'syz.6.746': attribute type 4 has an invalid length. [ 134.188765][ T7291] netlink: 'syz.6.746': attribute type 4 has an invalid length. [ 134.218373][ T7293] netlink: 'syz.5.749': attribute type 11 has an invalid length. [ 134.339045][ T7305] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.398265][ T7309] binder: 7308:7309 tried to acquire reference to desc 0, got 1 instead [ 134.424572][ T7309] binder: 7309:7308 translate fd array failed [ 134.433986][ T7309] binder: 7308:7309 transaction async to 7308:0 failed 70/29201/-22, size 112-24 line 3495 [ 134.443261][ T4315] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.482250][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 134.815919][ T7328] loop6: detected capacity change from 0 to 4096 [ 134.835865][ T7328] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 134.842383][ T7328] EXT4-fs (loop6): unmounting filesystem. [ 134.943430][ T7332] binder: 7331:7332 tried to acquire reference to desc 0, got 1 instead [ 134.949938][ T7332] binder: cannot allocate buffer [ 134.949971][ T7332] binder: 7331:7332 transaction async to 7331:0 failed 75/29201/-22, size 0-24 line 3239 [ 135.082573][ T4722] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.123205][ T7342] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 135.142286][ T7342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.941872][ T4722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.059940][ T7342] bond2: (slave veth5): Enslaving as an active interface with a down link [ 136.075284][ T7353] binder: 7352:7353 ioctl c0306201 20000080 returned -14 [ 136.081630][ T7353] binder: 7352:7353 tried to acquire reference to desc 0, got 1 instead [ 136.084386][ T7353] binder: 7352:7353 got transaction with invalid parent offset [ 136.095168][ T7353] binder: 7353:7352 failed to fixup parent [ 136.096973][ T7353] binder: 7352:7353 transaction async to 7352:0 failed 80/29201/-22, size 104-24 line 3549 [ 136.105955][ T4355] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.198987][ T7342] bond2: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 136.740158][ T7359] loop6: detected capacity change from 0 to 40427 [ 136.753689][ T7359] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 136.761599][ T7359] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 136.963998][ T7385] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 137.140655][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.777'. [ 137.183411][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.777'. [ 137.234079][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.777'. [ 138.903880][ T7433] binder: 7432:7433 tried to acquire reference to desc 0, got 1 instead [ 139.155812][ T7448] binder: 7447:7448 tried to acquire reference to desc 0, got 1 instead [ 139.169428][ T4362] binder: undelivered TRANSACTION_COMPLETE [ 140.524042][ T7481] loop8: detected capacity change from 0 to 512 [ 140.734120][ T7492] netlink: 'syz.7.807': attribute type 25 has an invalid length. [ 140.736429][ T7492] netlink: 'syz.7.807': attribute type 8 has an invalid length. [ 140.743166][ T7492] netlink: 44 bytes leftover after parsing attributes in process `syz.7.807'. [ 140.745741][ T7492] netlink: 40 bytes leftover after parsing attributes in process `syz.7.807'. [ 141.532195][ T7481] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 141.612694][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.944628][ T55] EXT4-fs error (device loop8): __ext4_get_inode_loc:4507: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 141.951078][ T55] EXT4-fs error (device loop8): __ext4_get_inode_loc:4507: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 141.969206][ T6109] EXT4-fs (loop8): unmounting filesystem. [ 142.000057][ T6109] EXT4-fs error (device loop8): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 142.003778][ T6109] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 142.016729][ T6109] EXT4-fs error (device loop8): ext4_quota_off:7120: inode #4: comm syz-executor: mark_inode_dirty error [ 142.159409][ T4313] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 142.162322][ T4313] CPU: 0 PID: 4313 Comm: kworker/u5:2 Not tainted 6.1.147-syzkaller #0 [ 142.164432][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.167146][ T4313] Workqueue: hci5 hci_rx_work [ 142.168371][ T4313] Call trace: [ 142.169303][ T4313] dump_backtrace+0x1c8/0x1f4 [ 142.170596][ T4313] show_stack+0x2c/0x3c [ 142.171720][ T4313] __dump_stack+0x30/0x40 [ 142.172928][ T4313] dump_stack_lvl+0xf8/0x160 [ 142.174201][ T4313] dump_stack+0x1c/0x5c [ 142.175423][ T4313] sysfs_create_dir_ns+0x22c/0x24c [ 142.176812][ T4313] kobject_add_internal+0x5a8/0xb30 [ 142.178225][ T4313] kobject_add+0x134/0x1f8 [ 142.179522][ T4313] device_add+0x3f0/0xf94 [ 142.180734][ T4313] hci_conn_add_sysfs+0xbc/0x1cc [ 142.182173][ T4313] le_conn_complete_evt+0xa24/0xf8c [ 142.183610][ T4313] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 142.185272][ T4313] hci_le_meta_evt+0x2c0/0x4a4 [ 142.186617][ T4313] hci_event_packet+0x6ac/0xf08 [ 142.188000][ T4313] hci_rx_work+0x324/0xaa0 [ 142.189216][ T4313] process_one_work+0x7f4/0x13a8 [ 142.190590][ T4313] worker_thread+0x8c8/0xfbc [ 142.191841][ T4313] kthread+0x250/0x2d8 [ 142.192969][ T4313] ret_from_fork+0x10/0x20 [ 142.201156][ T4313] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 142.204728][ T4313] Bluetooth: hci5: failed to register connection device [ 142.328384][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.823'. [ 142.350129][ T7532] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 142.421405][ T4313] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 142.803531][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.812472][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.843311][ T7548] loop8: detected capacity change from 0 to 1024 [ 142.872544][ T7548] hfsplus: unable to parse mount options [ 142.892313][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.8.828'. [ 143.411931][ T7566] overlayfs: failed to clone upperpath [ 143.524722][ T7569] loop8: detected capacity change from 0 to 1024 [ 143.559162][ T7569] hfsplus: unable to parse mount options [ 143.681001][ T7576] binder: 7575:7576 tried to acquire reference to desc 0, got 1 instead [ 143.694272][ T7576] binder: 7575:7576 got transaction with invalid handle, 3 [ 143.703961][ T7576] binder_debug: 1 callbacks suppressed [ 143.703973][ T7576] binder: 7576:7575 translate handle failed [ 143.716416][ T7576] binder: 7575:7576 transaction async to 7575:0 failed 100/29201/-22, size 72-24 line 3402 [ 143.723103][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.928302][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 143.928316][ T27] audit: type=1326 audit(143.909:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f95af28 code=0x7ffc0000 [ 143.948607][ T27] audit: type=1326 audit(143.909:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f95af28 code=0x7ffc0000 [ 143.975855][ T27] audit: type=1326 audit(143.909:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7f95af28 code=0x7ffc0000 [ 144.002332][ T27] audit: type=1326 audit(143.909:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f95af28 code=0x7ffc0000 [ 144.021393][ T7590] netlink: 168 bytes leftover after parsing attributes in process `syz.7.844'. [ 144.029625][ T27] audit: type=1326 audit(143.909:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f95af28 code=0x7ffc0000 [ 144.050108][ T27] audit: type=1326 audit(143.909:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff7f95af28 code=0x7ffc0000 [ 144.080591][ T7565] loop6: detected capacity change from 0 to 32768 [ 144.082932][ T27] audit: type=1326 audit(143.909:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff7f95af5c code=0x7ffc0000 [ 144.100821][ T7565] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.834 (7565) [ 144.104508][ T27] audit: type=1326 audit(143.949:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff7f9595f0 code=0x7ffc0000 [ 144.118048][ T27] audit: type=1326 audit(143.949:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff7f95afcc code=0x7ffc0000 [ 144.130505][ T7565] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 144.133500][ T27] audit: type=1326 audit(143.949:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7f959454 code=0x7ffc0000 [ 144.150797][ T7565] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 144.153658][ T7565] BTRFS info (device loop6): using free space tree [ 144.194188][ T7602] binder: 7599:7602 tried to acquire reference to desc 0, got 1 instead [ 144.224301][ T7602] binder: 7599:7602 got transaction with invalid data ptr [ 144.232762][ T7602] binder: 7599:7602 transaction async to 7599:0 failed 105/29201/-14, size 252-24 line 3342 [ 144.253593][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.345100][ T4313] Bluetooth: hci1: command 0x0409 tx timeout [ 144.415032][ T7565] BTRFS info (device loop6): enabling ssd optimizations [ 144.481774][ T7624] loop7: detected capacity change from 0 to 1024 [ 144.484182][ T7624] EXT4-fs: Ignoring removed oldalloc option [ 144.556222][ T7624] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 144.777853][ T4974] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 144.866468][ T7642] sctp: [Deprecated]: syz.8.852 (pid 7642) Use of int in maxseg socket option. [ 144.866468][ T7642] Use struct sctp_assoc_value instead [ 144.970228][ T5114] EXT4-fs (loop7): unmounting filesystem. [ 145.060460][ T7649] binder: 7648:7649 tried to acquire reference to desc 0, got 1 instead [ 145.095600][ T7649] binder: 7648:7649 got transaction with out-of-order buffer fixup [ 145.097956][ T7649] binder: 7648:7649 transaction call to 7648:0 failed 110/29201/-22, size 112-24 line 3461 [ 145.110526][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.135615][ T4722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.222739][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.855'. [ 145.238313][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.7.855'. [ 145.406034][ T7664] binder: 7663:7664 tried to acquire reference to desc 0, got 1 instead [ 145.414505][ T7664] binder: 7663:7664 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 145.426832][ T4383] binder: undelivered TRANSACTION_COMPLETE [ 145.464160][ T4383] binder: undelivered transaction 115, process died. [ 145.513315][ T7667] loop7: detected capacity change from 0 to 128 [ 145.566589][ T7669] loop6: detected capacity change from 0 to 512 [ 145.599125][ T7669] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.858: inode #1: comm syz.6.858: iget: illegal inode # [ 145.651191][ T7669] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.858: error while reading EA inode 1 err=-117 [ 145.670623][ T7669] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.684390][ T7669] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.858: inode #1: comm syz.6.858: iget: illegal inode # [ 145.714825][ T7669] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.858: error while reading EA inode 1 err=-117 [ 145.726140][ T7669] EXT4-fs (loop6): 1 orphan inode deleted [ 145.728932][ T7669] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 145.749399][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.7.859'. [ 145.813485][ T7669] netlink: 104 bytes leftover after parsing attributes in process `syz.6.858'. [ 145.816334][ T7669] netlink: 104 bytes leftover after parsing attributes in process `syz.6.858'. [ 145.826695][ T7669] netlink: 104 bytes leftover after parsing attributes in process `syz.6.858'. [ 145.842766][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.859'. [ 145.917203][ T4974] EXT4-fs (loop6): unmounting filesystem. [ 146.294357][ T7703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.298850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.309302][ T7703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.320520][ T7703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.327613][ T7703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.330336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.355510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.360329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.362729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.507283][ T7710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.637843][ T7710] team0: Port device bond0 removed [ 146.640957][ T7710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.643118][ T7710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.651006][ T7716] binder: 7715:7716 unknown command 0 [ 146.656472][ T7716] binder: 7715:7716 ioctl c0306201 20000080 returned -22 [ 146.670707][ T7710] device bridge_slave_0 left promiscuous mode [ 146.677143][ T7716] binder: 7715:7716 tried to acquire reference to desc 0, got 1 instead [ 146.683446][ T7716] binder: 7715:7716 got transaction with invalid parent offset or type [ 146.687501][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.690555][ T7716] binder: 7716:7715 failed to fixup parent [ 146.716788][ T7710] device bridge_slave_1 left promiscuous mode [ 146.718565][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.769603][ T7710] bond0: (slave bond_slave_0): Releasing backup interface [ 146.857770][ T7710] bond0: (slave bond_slave_1): Releasing backup interface [ 146.923187][ T7710] team0: Failed to send options change via netlink (err -105) [ 146.934080][ T7710] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 146.947605][ T7710] team0: Port device team_slave_0 removed [ 146.977965][ T7710] team0: Failed to send options change via netlink (err -105) [ 146.994806][ T7710] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 147.005929][ T7710] team0: Port device team_slave_1 removed [ 147.008089][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.010236][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.027695][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.030102][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.064184][ T7710] bridge3: port 1(veth3) entered disabled state [ 147.119153][ T7710] bond1: (slave vlan3): Releasing active interface [ 147.166664][ T7710] bond2: (slave veth5): Releasing active interface [ 147.237515][ T7712] team0: Failed to send options change via netlink (err -105) [ 147.240221][ T7712] team0: Mode changed to "loadbalance" [ 147.960978][ T4397] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.158516][ T4313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.164283][ T4313] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.168544][ T4313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.185270][ T4313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.190052][ T4313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.192247][ T4313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.629671][ T4397] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.214943][ C1] sched: RT throttling activated [ 150.255141][ T4313] Bluetooth: hci3: command 0x0409 tx timeout [ 150.497588][ T4397] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.546178][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.892'. [ 150.551582][ T7790] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 150.928019][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.892'. [ 151.638582][ T4397] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.438534][ T4313] Bluetooth: hci3: command 0x041b tx timeout [ 152.714598][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 153.725970][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.728191][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.730902][ T7774] device bridge_slave_0 entered promiscuous mode [ 153.734246][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.749367][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.765459][ T7774] device bridge_slave_1 entered promiscuous mode [ 153.864084][ T4397] tipc: Left network mode [ 154.229230][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.495140][ T4309] Bluetooth: hci3: command 0x040f tx timeout [ 154.697216][ T7905] net_ratelimit: 157 callbacks suppressed [ 154.697229][ T7905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.701846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.707124][ T7905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.711584][ T7905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.714060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.717402][ T7905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.720348][ T7905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.723338][ T7905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.727028][ T7903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.729750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.575024][ T4313] Bluetooth: hci3: command 0x0419 tx timeout [ 161.776736][ C0] net_ratelimit: 193 callbacks suppressed [ 161.776752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.780441][ T4309] ------------[ cut here ]------------ [ 161.783110][ T4309] WARNING: CPU: 1 PID: 4309 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x1fc/0x424 [ 161.785850][ T4309] Modules linked in: [ 161.787011][ T4309] CPU: 1 PID: 4309 Comm: kworker/u5:1 Not tainted 6.1.147-syzkaller #0 [ 161.789335][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.792083][ T4309] Workqueue: hci0 hci_conn_timeout [ 161.793497][ T4309] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 161.795652][ T4309] pc : hci_conn_timeout+0x1fc/0x424 [ 161.797096][ T4309] lr : hci_conn_timeout+0x1fc/0x424 [ 161.798565][ T4309] sp : ffff800020817b30 [ 161.799674][ T4309] x29: ffff800020817b30 x28: ffff0000d49ba000 x27: ffff0000d5f30330 [ 161.801973][ T4309] x26: ffff0000c0bf0018 x25: 1fffe0001817e003 x24: dfff800000000000 [ 161.804157][ T4309] x23: ffff0000c4ec2000 x22: dfff800000000000 x21: 00000000ffffffff [ 161.806394][ T4309] x20: ffff0000d5f30000 x19: ffff0000d5f30330 x18: ffff800011aabce0 [ 161.808540][ T4309] x17: ffff8000181e7000 x16: ffff800008042c60 x15: ffff800017cc7fc0 [ 161.810838][ T4309] x14: ffff0000d5282658 x13: 0000000000000000 x12: 0000000000ff0100 [ 161.813091][ T4309] x11: ff00800010b4f0d0 x10: 0000000000000000 x9 : ffff800010b4f0d0 [ 161.815409][ T4309] x8 : ffff0000d5281bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 161.817581][ T4309] x5 : ffff800018208290 x4 : 0000000000000008 x3 : ffff800010b4ef0c [ 161.819811][ T4309] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 161.822145][ T4309] Call trace: [ 161.823040][ T4309] hci_conn_timeout+0x1fc/0x424 [ 161.824450][ T4309] process_one_work+0x7f4/0x13a8 [ 161.825807][ T4309] worker_thread+0x8c8/0xfbc [ 161.827097][ T4309] kthread+0x250/0x2d8 [ 161.828207][ T4309] ret_from_fork+0x10/0x20 [ 161.829375][ T4309] irq event stamp: 10734 [ 161.830528][ T4309] hardirqs last enabled at (10733): [] _raw_spin_unlock_irq+0x3c/0x90 [ 161.833369][ T4309] hardirqs last disabled at (10734): [] el1_dbg+0x24/0x80 [ 161.835785][ T4309] softirqs last enabled at (10374): [] handle_softirqs+0xaf8/0xc6c [ 161.838515][ T4309] softirqs last disabled at (9955): [] __do_softirq+0x14/0x20 [ 161.841098][ T4309] ---[ end trace 0000000000000000 ]--- [ 164.345219][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.315193][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.325343][ T7889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.369032][ T7774] team0: Port device team_slave_0 added [ 165.442924][ T7774] team0: Port device team_slave_1 added [ 165.461250][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.463451][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.471659][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.476212][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.478165][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.485719][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.617134][ T7774] device hsr_slave_0 entered promiscuous mode [ 165.655338][ T7774] device hsr_slave_1 entered promiscuous mode [ 166.082076][ T7774] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 166.219037][ T7774] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 166.247371][ T7774] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 166.408964][ T7774] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 166.758505][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.766207][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.768593][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.774114][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.829527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.832506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.836810][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.838765][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.846721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.849673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.852444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.855102][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.857147][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.203044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.206264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.209216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.212833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.217416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.220281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.223088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.226528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.229327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.306638][ T4397] device hsr_slave_0 left promiscuous mode [ 167.345240][ T4397] device hsr_slave_1 left promiscuous mode [ 167.425127][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.428521][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.431823][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.434193][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.437046][ T4397] device bridge_slave_1 left promiscuous mode [ 167.438902][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.486114][ T4397] device bridge_slave_0 left promiscuous mode [ 167.487908][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.635224][ T4397] device veth1_macvtap left promiscuous mode [ 167.637116][ T4397] device veth0_macvtap left promiscuous mode [ 167.638896][ T4397] device veth1_vlan left promiscuous mode [ 167.640617][ T4397] device veth0_vlan left promiscuous mode [ 170.218708][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 170.390044][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 170.576735][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.826566][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface