last executing test programs: 25m12.557633175s ago: executing program 32 (id=123): creat(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x0) fanotify_init(0x202, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) finit_module(r0, &(0x7f0000000240)='erofs\x00', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001a40)={0x2020}, 0x2020) 24m44.592573356s ago: executing program 33 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) io_uring_setup(0x5d59, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local=0x7ffffffe}, 0x10) shutdown(r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4\x00', 0x1c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) 24m33.780864073s ago: executing program 34 (id=174): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x40c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r3, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) connect$bt_rfcomm(r2, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x1}, 0xe) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0x0, 0xed1b, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x200000, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0xfffffffc, 0x0, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0xfffffffd, 0xffffffff, 0x0, 0x6caa, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x4]}, 0x45c) 24m7.588863338s ago: executing program 35 (id=207): syz_io_uring_setup(0x20a0, &(0x7f00000001c0)={0x0, 0x66bd, 0xf59bfae318842803, 0x3, 0x37a}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 21m7.596676633s ago: executing program 5 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m5.102192298s ago: executing program 5 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xf3c342ad85829738) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000140)) 21m3.891850892s ago: executing program 5 (id=601): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 21m2.144422954s ago: executing program 5 (id=605): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371"}}}}}, 0x0) 21m0.343275918s ago: executing program 5 (id=607): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x200600, &(0x7f00000000c0)=ANY=[], 0x1, 0x415, &(0x7f0000000140)="$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") 20m57.907320942s ago: executing program 5 (id=612): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) 20m42.279935365s ago: executing program 36 (id=612): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) 11m25.05345783s ago: executing program 6 (id=2760): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 11m23.744872981s ago: executing program 6 (id=2764): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m16.346755485s ago: executing program 6 (id=2790): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, 0x0}, 0x4040810) 11m15.567944816s ago: executing program 6 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x44, 0x64, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 11m13.723032696s ago: executing program 6 (id=2798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000006c0)=[@in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @local}], 0x10) 11m12.714763783s ago: executing program 6 (id=2803): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="11000000140025000307f4f9002304000a", 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="15a31ae9b77a306d5d3418def83421daef8bc61f50c603b6e2072bf9aa93746fe11ce6cc33ca4fe0f3cbfd228dd5a2951f1218dacfd2cc0e36966c9fde554cdc4c", @ANYRESDEC=0x0, @ANYBLOB="2489f2ff4c07e09fa28aaf455d08a155c648b11556baff00fadda8159f18b6e4e7a72114573fc922b29302bbb534ce2e14f88c00fbf1c8d7068da0bbaa4d2073fcedfab24736f8aa1b52caa9dc7e8fc210c8c61aef60dc0b6c9bde9285aab16d91f8e551fe8636dcfa2dfdeb1a19c297dc1c9e4f1a2ba4c0607082da9e4dda7c6e70034c12891fe5163a6b9cfa6f62f012b28115f42049ddbd38b7597b28f3", @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="209cf81d33036a342947000000000000000000003182adf8ccf18d3a17caddd82eb5f6dd318ac9e5323ecec0ecfcf7cb54c6e57a541bc679a068fe597a43c33cfe0ace6839", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x48014) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7}, &(0x7f00000005c0), &(0x7f0000000a00)=r8}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10m57.5052929s ago: executing program 37 (id=2800): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m57.058483765s ago: executing program 38 (id=2803): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="11000000140025000307f4f9002304000a", 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="15a31ae9b77a306d5d3418def83421daef8bc61f50c603b6e2072bf9aa93746fe11ce6cc33ca4fe0f3cbfd228dd5a2951f1218dacfd2cc0e36966c9fde554cdc4c", @ANYRESDEC=0x0, @ANYBLOB="2489f2ff4c07e09fa28aaf455d08a155c648b11556baff00fadda8159f18b6e4e7a72114573fc922b29302bbb534ce2e14f88c00fbf1c8d7068da0bbaa4d2073fcedfab24736f8aa1b52caa9dc7e8fc210c8c61aef60dc0b6c9bde9285aab16d91f8e551fe8636dcfa2dfdeb1a19c297dc1c9e4f1a2ba4c0607082da9e4dda7c6e70034c12891fe5163a6b9cfa6f62f012b28115f42049ddbd38b7597b28f3", @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="209cf81d33036a342947000000000000000000003182adf8ccf18d3a17caddd82eb5f6dd318ac9e5323ecec0ecfcf7cb54c6e57a541bc679a068fe597a43c33cfe0ace6839", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x48014) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7}, &(0x7f00000005c0), &(0x7f0000000a00)=r8}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m38.58620915s ago: executing program 3 (id=3969): creat(&(0x7f0000000040)='./bus\x00', 0x0) 3m37.603274033s ago: executing program 3 (id=3971): socket$netlink(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b59f9cafaf65de9f19f55d0e5ad", 0xffeb}], 0x1}, 0x0) 3m34.511041245s ago: executing program 3 (id=3976): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 3m32.833003264s ago: executing program 3 (id=3982): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x2404c081) 3m31.794021108s ago: executing program 3 (id=3986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x800, 0x3, 0x8}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = socket$packet(0x11, 0x3, 0x300) connect$packet(r4, &(0x7f0000000280)={0x11, 0x6, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) mount$9p_virtio(0x0, 0x0, 0x0, 0x800440, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 3m27.717513365s ago: executing program 3 (id=3991): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "3c8d6ed996959079", "6a8c559b1df27b094c6b646d7fa5fdfe", "afb069a3", "0000000000000006"}, 0x28) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m11.947441145s ago: executing program 39 (id=3991): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "3c8d6ed996959079", "6a8c559b1df27b094c6b646d7fa5fdfe", "afb069a3", "0000000000000006"}, 0x28) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m39.73996599s ago: executing program 9 (id=4092): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc044) 2m38.585223276s ago: executing program 9 (id=4096): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000000), 0x1, 0x559d, &(0x7f0000005680)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$UHID_INPUT(r0, &(0x7f00000044c0)={0x8, {"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", 0x1000}}, 0x1006) 2m33.729657595s ago: executing program 9 (id=4103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x46942, 0x42) pwrite64(r1, &(0x7f0000000000), 0x0, 0x404042ffc) 2m33.657418155s ago: executing program 7 (id=4104): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x2597, 0x0, 0x9, 0x3bd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2m32.912222262s ago: executing program 4 (id=4105): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc044) 2m32.216744387s ago: executing program 4 (id=4107): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 2m31.845213898s ago: executing program 9 (id=4108): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000440)={[{@usrjquota}, {@data_err_ignore}, {@stripe}, {@noblock_validity}, {@grpid}]}, 0x3, 0x457, &(0x7f0000000dc0)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="00435cf8696469795bbff02495029ca3673a13d458739684e04ec6e08b9af9cc35089b9a50218a6f77132a426189d9879d76225f70d0e041cd6dc0c621b15d028acdc645af9ba5632624"], 0x1, 0x92d, &(0x7f0000001340)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/109, 0x6d) getdents(r0, 0x0, 0x0) 2m31.292754477s ago: executing program 7 (id=4110): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m31.1572877s ago: executing program 4 (id=4111): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x4440, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m29.951321979s ago: executing program 4 (id=4112): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5e1, &(0x7f00000006c0)="$eJzs3b1vG+cdB/Dv0bRsuYCjJHbiFgEqxEBaVKitFyitutQtikJDUATp0Fmw6ZgwrQQSUyhBUbjva4f8AemgrVOB7gbSud2yagxQoEsmdXJxx6PESKwsxopIxZ+P8fD5PXzunnvux+Mdj4LBAM+s1bk0H6XI6twbW2V7Z3ups7O99KAfJ7mQpJE0e1WK9aT4OLmVXsnXyyfr4Yr/t50P2ytvffLZzqe9VrMu1fKNo9Y7nod1yWySc3V9UuPdfurxir09LBN2vZ84GLfHhzwcZfWnfN8Ck6DoXTcPmUkuJblYfw5IfXZonO7sTt5IZzkAAAA4o57bzW62cnnc8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICzpP79/6IujX48m6L/+/9T9XOp4zPt0bgnAAAAAAAAAAAn4Ju72c1WLvfbj4vqb/6vVo0r1ePX8l4208pGbmQra+mmm40sJJkZGGhqa63b3Vg4xpqLQ9dcPJ39BQAAAAAAAICvqN9mdf/v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAmK5FyvqsqVfjyTRjPJxSRT5XIPk3/147Ps0bgnAAAAAKfgud3sZiuX++3HRXXP/1J1338x72U93bTTTSet3Km+C+jd9Td2tpc6O9tLD8pyeNwf/WekaVQjpvfdw/AtX6uWmM7dtKtnbuR23kknd9Ko1ixd689n+Lx+U86p+GHtmDO7U9flnv+5rifDTJWR83sZma/nVmbj+aMzMeKrc3BLC2nsffNz5Qk5b9bBKDm/VNfl/vxxonO+OHD0vXR0JpJv/f2vv7jXWb9/7+7m3OTs0hd0MBP/HcjEy89UJuarTFzda6/mp/l55jKbN7ORdn6ZtXTTymx+UkVr9fFcPs4cnalbn2u9+aSZTNWvS+8sOtqcXq3WvZx2fpZ3cietvF79W8xCvpflLGdl4BW+eowzbWO0M+31b9fBdJI/1fVkKPP6/EBeB8+5M1Xf4DP7WXrh5K9HzW/UQbmN39X1ZDiYiYWBTLx4dCb+8rh83Oys39+4t/buMbf3Wl2X76M/TNRVojxeXihfrKr1+aOj7HtxaN9C1Xdlr69xqO/qXt+T3qlT9We4wyMtVn0vD+1bqvquDfQN+7wFwMS79J1LU9P/nv7n9EfTv5++N/3GxR9f+P6FV6Zy/h/nf9CcP/da45Xib/kov96//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL64zfc/uL/W6bQ2BIJTDs4nmYBpCIYG4z4zAV+2m90H797cfP+D77YfrL3deru1vrK8vDK/svz60s277U5rvvc47lkCX4b9i/64ZwIAAAAAAAAAAAAc12n8d4Jx7yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtq3OpfkoRRbmb8yX7Z3tpU5Z+vH+ks0kjSTFr5Li4+RWeiUzA8MVB4Y/1w8+bK+89clnO5/uj9XsL98Yst6IHtYls/U2Z09wvNtPPV6xt4dlwq73Ewfj9r8AAAD//2jzDR0=") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000280)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x2010000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m29.462083369s ago: executing program 7 (id=4113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m28.941305322s ago: executing program 9 (id=4114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000040)) 2m28.458566791s ago: executing program 4 (id=4115): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001b80)=""/4106, 0x100a}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f0000003500)=""/182, 0xb6}, {&(0x7f00000054c0)=""/4077, 0xfed}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/281, 0x119}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 2m28.120770079s ago: executing program 7 (id=4117): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x38000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x80000}]) 2m27.642190148s ago: executing program 9 (id=4118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x80) 2m27.534777868s ago: executing program 4 (id=4119): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x2597, 0x0, 0x9, 0x3bd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2m24.016474017s ago: executing program 40 (id=4118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x80) 2m23.556192082s ago: executing program 41 (id=4119): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x2597, 0x0, 0x9, 0x3bd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2m23.428542162s ago: executing program 7 (id=4124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='o'], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m22.841624674s ago: executing program 7 (id=4125): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)=0x2) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0xb}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x2) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x807, 0x4, 0x6, 0x3}) lseek(r4, 0x3ff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000005c0)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX, @ANYBLOB=',wid=', @ANYRESDEC, @ANYRES32], 0x5, 0xa51, &(0x7f0000001cc0)="$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") r6 = open(&(0x7f00000001c0)='./file2\x00', 0x8040, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000400)) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x0) 2m20.45705549s ago: executing program 42 (id=4125): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)=0x2) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0xb}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x2) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x807, 0x4, 0x6, 0x3}) lseek(r4, 0x3ff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000005c0)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX, @ANYBLOB=',wid=', @ANYRESDEC, @ANYRES32], 0x5, 0xa51, &(0x7f0000001cc0)="$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") r6 = open(&(0x7f00000001c0)='./file2\x00', 0x8040, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000400)) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x0) 1m24.873207419s ago: executing program 8 (id=4198): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m23.74801484s ago: executing program 8 (id=4201): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000001280)='\b\x00\x00\x00\b\x00\x00\x00', 0x8}], 0x1) 1m22.674668397s ago: executing program 8 (id=4203): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d8, 0x0) 1m19.871517065s ago: executing program 8 (id=4209): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0008b0cf8098a954f0c13d46c5f2da99dd78517bdc8c78047b090ec8e43f7def3d6e7ff57769de041cb1ee36eb9ef08355f53fb91f02fc63278f3613aa6fba7e9b000800008a4f6d9dbe20a5c5b893c3751e0d41a772d4e6963860d07e3f3f06b10f3eeb3aa2324f6e3d348cf3fa4536d200214110447005e899317ac49bdb087c7ee9c6a7f01bf8f94692bfa45daf2423901aa20a1e0b8736e57abc12ff197cc72bc4b25cfc4ae212b63861ba8545d2"], 0x1, 0x14d1, &(0x7f00000015c0)="$eJzs3AlwlcW2KOBe3f1DiBG3EZl79fphiwGaiIjIICIyiIiICIjMIiBiRERERISATCICIgIyRkSGEAGRIUDEMM/zPBg5iIiIyCSTQL/C47ncczy3uO+8cy+vKuur6kqv/Hut3Z1VyT9UZf/UdViNxjWrNiAi8a9Qf5vAX78kCyFihBADhRC3CSECIUTZ+LLx147nUpD8L70J+x/SMPVmr4DdTNz/7I37n71x/7M37n/2xv3P3rj/2Rv3P3vj/jOWraUVuJ1H9h38/D874/N/9sb9z964/9kb9z974/5nb9z/7I37n71x/7M37j9j2dr/B8+gedzEwRhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM/S+44K/TQoi/zW/2uhhjjDHGGGOMMfbv43Pe7BUwxhhjjDHGGGPsfx4IKZTQIhA5RE4RI3KJWHGLiBO3itziNhERt4t4cYfII+4UeUU+kV8UEAVFIVFYGIHCChKhKCKKiqi4SxQTd4sEUVyUECWFE6VEorhHlBb3ijLiPlFW3C/KiQdEeVFBVBSVxIOisnhIVBEPi6riEVFNVBc1RE3xqKglHhO1xeOijnhC1BVPinriKVFfPC0aiIaikXhGNBbPiiaiqWgmmosWoqVo9S/lvyV6iLdFT9FLJIveoo94R/QV/UR/MUAMFO+KQeI9MVi8L4aIoWKY+EAMFx+KEeIjMVKMEqPFx2KMGCvGifFigpgoUsQnYpL4VEwWn4kpYqqYJqaLVDFDpInPxUwxS8wWX4g54ksxV8wT88UCkS4WikViscgQX4kl4muRKZaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdopdYrfYI/aKfWK/OCC+EVni2//L/PP/kN8NBAiQIEGDhhyQA2IgBmIhFuIgDnJDbohABOIhHvJAHsgLeSE/5IeCUBAKQ2FAQCAgKAJFIApRKAbFIAESoASUAAcOEiERSsO9UAbKQFkoC+WgHJSHClABKkElqAyVoQpUgapQFapBNagBNeBReBQeg9pQG+pAHagLdaEe1IP6UB8aQANoBI2gMTSGJtAEmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIAk6QkfoBJ2gM3SGLtAFukJX6AZvwpvwFrwFb8Pb0Auqyd7QB/pAX+gL/WEADIB3YRC8B+/B+zAEhsIw+AA+gA9hBJyDkTAKRsNoqCzHwjgYDyQnQgqkwCSYBJNhMkyBqTAVpkMqzIA0SIOZMAtmwRcwB76EL2EezIMFkA7psAgWQwZkwBI4D5mwFJbBclgBK2EFrIY1sBrWwXpYBxthI2yGzbAVtsJ22A47YSfsht2wF/bCftgPQyALsuAgHIRDcAgOw2E4AkfgKByFY3AMjsNxOAEn4CScgtNwCs7CWTgH5+ECXIBLcAkuw2W4Clev/fLLa7TUMofMIWNkjIyVsTJOxsncMreMyIiMl/Eyj8wj88q8Mr/MLwvKgrKwLCxRoiQZyiKyiIzKqCwmi8kEmSBLyBLSSScTZaIsLUvLMrKMLCvvl+XkA7K8rCDbukqykqws27kq8mFZVVaV1WR1WUPWlDVlLVlL1pa1ZR1ZR9aVdWU9+ZSsL3tDf2gor3WmsRwKTeQwaCabyxaypfwQnpOt5QhoI9vKdvIFOQpGQgfZ2iXJl2VHOQ46yVfleHhNdpEToat8Q3aTb8ru8i3ZQ7ZxPWUvOQV6yz5yOvSV/WR/OUDOhOryWsdqyPflEDlUDpMfyAXwoRwhP5Ij5Sg5Wn4sx8ixcpwcLyfIiTJFfiInyU/lZPmZnCKnymlyukyVM2Sa/FzOlLPkbPmFnCO/lHPlPDlfLpDpcqFcJBfLDPmVXCK/lplyqVwml8sVcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJrfLHXKn3CV3yz1yr9wn98sD8huZJb+VB+Vf5CH5nTwsv5dH5A/yqPxRHpM/yePyZ3lC/iJPylPytDwjz8pf5Tl5Xl6QF+Ul+Zu8LK/Iq9JLoUBJpZRWgcqhcqoYlUvFqltUnLpV5Va3qYi6XcWrO1QedafKq/Kp/KqAKqgKqcLKKFRWkQpVEVVURdVdqpi6WyWo4qqEKqmcKqUS1T2qtLpXlVH3qbLqflVOPaDKqwqqoqqkHlSV1UOqinpYVVWPqGqquqqhaqpHVS31mKqtHld11BOqrnpS1VNPqfrqadVANVSN1DOqsXpWNVFNVTPVXLVQLVUr9ZxqrZ5XbVRb1U69oNqrF1UH9ZJKUi+rjuoV1Um9qjqr11QX9brqqt5Q3dSbqru6oq4qr3qqXipZ9VZ91Duqr+qn+qsBaqB6Vw1S76nB6n01RA1Vw9QHarj6UI1QH6mRapQarT5WY9RYNU6NVxPURJWiPlGT1KdqsvpMTVFT1TQ1XaWqGar/H5Vm/zfyP/0n+YN/f/fNaovaqrap7WqH2ql2qd1qj9qj9ql96oA6oLJUljqoDqpD6pA6rA6rI+qIOqqOqmPqmDqujqsT6oQ6qU6pi+qMOqt+VefUeXVeXVSX1CV1+Y+fgdCgpVZa60Dn0Dl1jM6lY/UtOk7fqnPr23RE367j9R06j75T59X5dH5dQBfUhXRhbTRqq0mHuoguqqP6Ll1M360TdHFdQpfUTpfSifqe/+f8G62vlW6lW+vWuo1uo9vpdrq9bq876A46SSfpjrqj7qQ76c66s+6iu+iuuqvuprvp7rq77qF76J66p07WybqPfkf31f10fz1AD9Tv6kF6kB6sB+sheogepofp4Xq4HqFH6JF6pB6tR+sxeowep8fpCXqCTtEpepKepCfryXqKnqKn6Wk6VafqNJ2mZ+qZeraerefoOXqunqvn6/k6XafrRXqRztAZeoleojP1Ur1UL9fL9Uq9Uq/Wq/VavVav1+v1Rr1RZ+oteoveprfpHXqH3qV36T16j96n9+kD+oDO0ln6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+gT+qQ+qU/r0/qsPqvP6XP6gr6gL+lL+rK+rK/qq9cu+wIZyEAHOsgR5AhigpggNogN4oK4IHeQO4gEkSA+iA/yBHcGeYN8Qf6gQFAwKBQUDkyAgQ0oCIMiQdEgGtwVFAvuDhKC4kGJoGTgglJBYnBPUDq4NygT3BeUDe4PygUPBOWDCkHFoFLwYFA5eCioEjwcVA0eCaoF1YMaQc3g0aBW8FhQO3g8qBM8EdQNngzqBU8F9YOngwZBw6BR8EzQOHg2aBI0DZoFzYMWQcug1b+1vvfn8j3veppeJtn0Nn3MO6av6Wf6mwFmoHnXDDLvmcHmfTPEDDXDzAdmuPnQjDAfmZFmlBltPjZjzFgzzow3E8xEk2I+MZPMp2ay+cxMMVPNNDPdpJoZJs18bmaaWWa2+cLMMV+auWaemW8WmHSz0Cwyi02G+cosMV+bTLPULDPLzQqz0qwyq80as9asM+vNBrPRbDKbzRaz1Wwz280Os9PsMrvNHrPX7DP7zQHzjcky35qD5i/mkPnOHDbfmyPmB3PU/GiOmZ/McfOzOWF+MSfNKXPanDFnza/mnDlvLpiL5pL5zVw2V8xV469d3F87vaNGjTkwB8ZgDMZiLMZhHObG3BjBCMZjPObBPJgX82J+zI8FsSAWxsJ4DSFhESyCUYxiMSyGCZiAJbAEOnSYiIlYGktjGSyDZbEslsNyWB7LY0WsiA/ig/gQPoQP48P4CD6C1bE61sSaWAtrYW2sjXWwDtbFulgP62F9rI8NsAE2wkbYGBtjE2yCzbAZtsAW2ApbYWtsjW2wDbbDdtge22MH7IBJmIQdsSN2wk7YGTtjF+yCXbErdsNu2B27Yw/sgT2xJyZjMvbBPtgX+2J/7I8DcSAOwkE4GAfjEByCw3AYDsfhOAJH4EgchaPxYxyDY3EcjscJOBFTMAUn4SScjJNxCk7BaTgNUzEV0zANZ+JMnI2zcQ7Owbk4F+fjfEzHdFyEizADM3AJLsFMzMRluAxX4ApchatwDa7BdbgON+AG3ISbcAtuwW24DXfgDtyFu3AP7sF9uA8P4AHMwiw8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJJ/E0nsazeBbP4Tm8gBfwEv6Gl/EKXkWPMTaXjbW32Dh7q81tb7P/GOe3BWxBW8gWtsbmtfn+LkZrbYItbkvYktbZUjbR3vOnuLytYCvaSvZBW9k+ZKv8Ka5lH7O17eO2jn3C1rSP/l1c1z5p69lnbX3b1DawzW0j29I2ts/aJrapbWab2xa2pW1vX7Qd7Es2yb5sO9pX/hQvsovtGrvWrrPr7T67316wF+0x+5O9ZH+zPW0vO9C+awfZ9+xg+74dYof+KR5tP7Zj7Fg7zo63E+zEP8XT7HSbamfYNPu5nWln/SlOtwvtHJth59p5dr5d8Ht8bU0Z9iu7xH5tM+1Su8wutyvsSrvKrv6PtS63G+0mu9nusXvtNrvd7rA77S67+/f42j4O2G9slv3WHrU/2kP2O3vYHrdH7A+/x9f2d9z+bE/YX+xJe8qetmfsWfurPWfP/77/a3s/Y6/Yq9ZbQUCSFGkKKAflpBjKRbF0C8XRrZSbbqMI3U7xdAfloTspL+Wj/FSAClIhKkyGkCwRhVSEilKU7qJidDclUHEqQSXJUSlKpHuoNN1LZeg+Kkv3Uzl6gMpTBapIlehBqkwPURV6mKrSI1SNqlMNqkmPUi16jGrT41SHnqC69CTVo6eoPj1NDaghNaJnqDE9S02oKTWj5tSCWlIreo5a0/PUhtpSO3qB2tOL1IFeoiR6mTrSK9SJXqXO9Bp1odepK71B3ehN6k5vUQ96m3pSL0qm3tSH3qG+1I/60wAaSO/SIHqPBtP7NISG0jD6gIbThzSCPqKRNIpG08c0hsbSOBpPE2gipdAnNIk+pcn0GU2hqTSNplMqzaA0+pxm0iyaTV/QHPqS5tI8mk8LKJ0W0iJaTBn0FS2hrymTltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjtoJ+2i3bSH9tI+2k8H6BvKom/pIP2FDtF3dJi+pyP0Ax2lH+kY/UTH6Wc6Qb/QSTpFp+kMnaVf6Rydpwt0kS7Rb3SZrtBV8iRCCGWoQh0GYY4wZxgT5gpjw1vCuPDWMHd4WxgJbw/jwzvCPOGdYd4wX5g/LBAWDAuFhUMTYmhDCsOwSFg0jIZ3hcXCu8OEsHhYIiwZurBUmBjeE5YO7w3LhPeFZcP7w3LhA2H5sEJYMawUPhhWDh8Kq4QPh1XDR8JqYfWwRlgzfDSsFT4W1g4fD+uET4RlwifDeuFTYf3w6bBB2DBsFD4TNg6fDZuETcNmYfOwRdgybBU+F7YOnw/bhG3DduELYfvwxbBD+FKYFL4cdgxfueHx5LB32Cd8J3wn9P5xNT+6IJoeXRhdFF0czYh+FV0S/TqaGV0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RTdHPW+Zk7hwEmnnHaBy+FyuhiXy8W6W1ycu9Xldre5iLvdxbs7XB53p8vr8rn8roAr6Aq5ws44dNaRC10RV9RF3V2umLvbJbjiroQr6Zwr5RJdS9fKtXKt3fOujWvr2rkX3AvuRfeie8m95F52Hd0rrpN71XV2r7ku7nX3unvDdXNvuu7uLdfDve16ul4u2SW7Pq6P6+v6uv6uvxvoBrpBbpAb7Aa7IW6IG+aGueFuuBvhRriRbqQb7Ua7MW6MG+fGuQlugktxKW6Sm+Qmu8luipviprlpLtWlujSX5ma6mW62m+3muDlurpvr5rv5Lt2lu0VukctwGW6JW+IyXaZb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2uR1uh9vldrk9bo/b5/a5A+6Ay3JZ7qA76A65Q+6w+94dcT+4o+5Hd8z95I67n90J94s76U650+6MO+t+defceXfBXXSX3G/usrvirjrvUiKfRCZFPo1MjnwWmRKZGpkWmR5JjcyIpEU+j8yMzIrMjnwRmRP5MjI3Mi8yP7Igkh5ZGFkUWRzJiHwVWRL5OpIZWRpZFlkeWRFZGfG+0LbQF/FFfdTf5Yv5u32CL+5L+JLe+VI+0d/jS/t7fRl/ny/r7/fl/AO+vK/gK/qmvplv7lv4lr6Vf8639s/7Nr6tb+df8O39i76Df8kn+Zd9R/+K7+Rf9Z39a76Lf9139W/4bv5N392/5Xv4t31P38sn+96+j3/H9/X9fH8/wA/07/pB/j0/2L/vh/ihfpj/wA/3H/oR/iM/0o/yo/3Hfowf68f58X6Cn+hT/Cd+kv/UT/af+Sl+qp/mp/tUP8On+c/9TD/Lz/Zf+Dn+Sz/Xz/Pz/QKf7hf6RX6xz/Bf+SX+a5/pl/plfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t9/j9/p9fr8/4L/xWf5bf9D/xR/y3/nD/nt/xP/gj/of/TH/kz/uf/Yn/C/+pD/lT/sz/qz/1Z/z5/0Ff9Ff8r/5y/6Kv8r/s8YYY4wx9t+ibnC89z/5nvxjXNNHCHHr9gJH/rHmhrx/nfeT+zpGhBAv9+ra8G+jYcPk5OQ/XpupRFB0nhAicj0/h7geLxXtxIsiSbQVpf/p+vrJikA3qB+9X4jY/5QTI67H1+vf+1/Ub7rwhvXnCZFQ9HpOLnE9vl6/zH9Rf3f7G9TP9V2KEG3+U06cuB5fr58onheviKS/eyVjjDHGGGOMMfZX/eSlbje6v712f15QX8/JKa7HN7o/Z4wxxhhjjDHG2M332pvdX3ouKaltZ57whCc8+Y/Jzf7LxBhjjDHGGPt3u37Rf7NXwhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZV//Gx8ndrP3yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjN1s/ycAAP//fMhn/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x41009432, &(0x7f00000001c0)) 1m18.271232641s ago: executing program 8 (id=4213): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000001280)='\b\x00\x00\x00\b\x00\x00\x00', 0x8}], 0x1) 1m16.784624379s ago: executing program 8 (id=4216): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0xfffe, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1m11.763781625s ago: executing program 43 (id=4216): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0xfffe, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 54.376207025s ago: executing program 0 (id=4247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 52.931657308s ago: executing program 0 (id=4249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x297, 0x0, 0x4}]}) 51.963426236s ago: executing program 0 (id=4251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 51.01973739s ago: executing program 2 (id=4254): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b59f9cafaf65de9f19f55d0e5ad", 0xffeb}], 0x1}, 0x0) 50.843692751s ago: executing program 0 (id=4255): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 50.181730371s ago: executing program 2 (id=4257): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@mpls_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x1c, 0x14, 0x14, 0x2, 0xfc, 0x1, 0xc8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8c4) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) write$tun(r0, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0xfce) mkdir(&(0x7f0000000000)='./file1\x00', 0x124) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r6]) 49.487985421s ago: executing program 0 (id=4258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024"], 0x64}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x72) 48.836488925s ago: executing program 0 (id=4260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x74) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 46.183143694s ago: executing program 44 (id=4260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x74) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 46.129750988s ago: executing program 2 (id=4262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000640)="000a18000000000000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 44.297711932s ago: executing program 2 (id=4266): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 43.321544586s ago: executing program 2 (id=4268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024"], 0x64}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x72) 42.288124953s ago: executing program 2 (id=4270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000001c0)="000a18000000e6c5dd00e9eb55000000000100aa44645a1945da05e80501000000e62e90d9c55d63", 0x28, 0x4000000, &(0x7f0000000380)={0x11, 0x6, r6, 0x1, 0x36, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 39.996232793s ago: executing program 45 (id=4270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000001c0)="000a18000000e6c5dd00e9eb55000000000100aa44645a1945da05e80501000000e62e90d9c55d63", 0x28, 0x4000000, &(0x7f0000000380)={0x11, 0x6, r6, 0x1, 0x36, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 3.260134307s ago: executing program 1 (id=4305): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 2.175185764s ago: executing program 1 (id=4306): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 1.651387093s ago: executing program 1 (id=4307): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 1.159364413s ago: executing program 1 (id=4308): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 482.096561ms ago: executing program 1 (id=4309): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 1 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000640)="000a180000fefffe00eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) kernel console output (not intermixed with test programs): 534.441038][ T8793] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.707864][T18276] syzkaller0: entered promiscuous mode [ 1536.713579][T18276] syzkaller0: entered allmulticast mode [ 1538.027217][T18289] loop7: detected capacity change from 0 to 512 [ 1538.196303][T18289] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1538.438699][T18289] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1538.527424][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1538.534090][ C1] EXT4-fs (loop7): initial error at time 1771186274: ext4_mb_generate_buddy:1315 [ 1538.543810][ C1] EXT4-fs (loop7): last error at time 1771186274: ext4_mb_generate_buddy:1315 [ 1538.596873][T18289] EXT4-fs (loop7): Remounting filesystem read-only [ 1538.638951][T18289] Quota error (device loop7): write_blk: dquota write failed [ 1538.684742][T18289] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1538.712195][T18289] Quota error (device loop7): write_blk: dquota write failed [ 1538.758711][T18289] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1538.838975][T18289] EXT4-fs (loop7): 1 truncate cleaned up [ 1538.885116][T18289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.323680][T15986] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.272620][T18333] syzkaller0: entered promiscuous mode [ 1542.309409][T18333] syzkaller0: entered allmulticast mode [ 1543.391478][T18344] loop8: detected capacity change from 0 to 512 [ 1543.498252][T18344] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1543.727067][T18344] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1543.787024][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.847446][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1543.854095][ C0] EXT4-fs (loop8): initial error at time 1771186279: ext4_mb_generate_buddy:1315 [ 1543.863686][ C0] EXT4-fs (loop8): last error at time 1771186279: ext4_mb_generate_buddy:1315 [ 1543.865304][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.922800][T18344] EXT4-fs (loop8): Remounting filesystem read-only [ 1543.970881][T18344] Quota error (device loop8): write_blk: dquota write failed [ 1544.015051][T18344] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 1544.108242][T18344] Quota error (device loop8): write_blk: dquota write failed [ 1544.116321][T18344] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1544.243734][T18344] EXT4-fs (loop8): 1 truncate cleaned up [ 1544.313229][T18344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1544.482983][T15889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.537948][T15889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.946616][T15421] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.518247][ T8793] bridge_slave_1: left allmulticast mode [ 1545.524133][ T8793] bridge_slave_1: left promiscuous mode [ 1545.624160][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.742423][ T8793] bridge_slave_0: left allmulticast mode [ 1545.771421][ T8793] bridge_slave_0: left promiscuous mode [ 1545.801333][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.829097][ T8793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.988222][ T8793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.039857][ T8793] bond0 (unregistering): Released all slaves [ 1549.671637][T18382] syzkaller0: entered promiscuous mode [ 1549.707846][T18394] loop9: detected capacity change from 0 to 8192 [ 1549.742794][T18382] syzkaller0: entered allmulticast mode [ 1550.308805][T18400] loop8: detected capacity change from 0 to 512 [ 1550.392201][T18400] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1550.749395][T18400] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1550.827480][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1550.834250][ C0] EXT4-fs (loop8): initial error at time 1771186286: ext4_mb_generate_buddy:1315 [ 1550.843884][ C0] EXT4-fs (loop8): last error at time 1771186286: ext4_mb_generate_buddy:1315 [ 1550.896602][T18400] EXT4-fs (loop8): Remounting filesystem read-only [ 1550.943547][T18400] Quota error (device loop8): write_blk: dquota write failed [ 1551.028175][T18400] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 1551.088353][T18400] Quota error (device loop8): write_blk: dquota write failed [ 1551.138438][T18400] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1551.208286][T18400] EXT4-fs (loop8): 1 truncate cleaned up [ 1551.257821][T18400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1551.993723][T15421] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.490509][ T8793] hsr_slave_0: left promiscuous mode [ 1552.592547][ T8793] hsr_slave_1: left promiscuous mode [ 1552.719363][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.783311][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.865891][T18416] loop8: detected capacity change from 0 to 256 [ 1552.875525][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.934902][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.173872][ T8793] veth1_macvtap: left allmulticast mode [ 1553.180426][ T8793] veth1_macvtap: left promiscuous mode [ 1553.186161][ T8793] veth0_macvtap: left promiscuous mode [ 1553.298047][ T8793] veth1_vlan: left promiscuous mode [ 1553.303642][ T8793] veth0_vlan: left promiscuous mode [ 1553.732894][ T29] audit: type=1800 audit(1771186289.457:288): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3881" name="file1" dev="loop8" ino=1048704 res=0 errno=0 [ 1555.586669][T18434] loop9: detected capacity change from 0 to 512 [ 1555.740733][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.748954][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.820292][T18452] loop7: detected capacity change from 0 to 512 [ 1557.199448][T18452] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1557.237646][T18434] FAT-fs (loop9): FAT read failed (blocknr 128) [ 1557.497091][T18452] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1557.535806][T18452] EXT4-fs (loop7): Remounting filesystem read-only [ 1557.542731][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1557.542829][ C1] EXT4-fs (loop7): initial error at time 1771186293: ext4_mb_generate_buddy:1315 [ 1557.542957][ C1] EXT4-fs (loop7): last error at time 1771186293: ext4_mb_generate_buddy:1315 [ 1557.686661][T18452] Quota error (device loop7): write_blk: dquota write failed [ 1557.825226][T18452] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1557.902660][T18452] Quota error (device loop7): write_blk: dquota write failed [ 1558.018314][T18452] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1558.178050][T18452] EXT4-fs (loop7): 1 truncate cleaned up [ 1558.186121][T18452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1558.380066][ T8793] team0 (unregistering): Port device team_slave_1 removed [ 1558.690146][ T8793] team0 (unregistering): Port device team_slave_0 removed [ 1558.967229][T18452] syz.7.3891 (18452) used greatest stack depth: 2480 bytes left [ 1559.059658][T15986] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.052417][T18490] tipc: Enabling of bearer rejected, failed to enable media [ 1561.549639][T18496] loop7: detected capacity change from 0 to 164 [ 1561.692838][T18496] Unable to read rock-ridge attributes [ 1561.857796][T18496] Unable to read rock-ridge attributes [ 1561.906534][T18496] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1562.455106][T18499] loop4: detected capacity change from 0 to 4096 [ 1562.680511][T18499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1562.907555][ T29] audit: type=1800 audit(1771186298.607:289): pid=18499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3903" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 1563.641988][T14585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.336005][ T29] audit: type=1326 audit(1771186301.987:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1566.753418][ T29] audit: type=1326 audit(1771186301.987:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1567.048924][ T29] audit: type=1326 audit(1771186301.997:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1567.184385][ T29] audit: type=1326 audit(1771186302.007:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1567.517620][ T29] audit: type=1326 audit(1771186302.007:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1567.897939][ T29] audit: type=1326 audit(1771186302.017:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1568.248613][ T29] audit: type=1326 audit(1771186302.027:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1568.639949][ T29] audit: type=1326 audit(1771186302.027:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1568.809771][ T29] audit: type=1326 audit(1771186302.037:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1568.841101][ T29] audit: type=1326 audit(1771186302.047:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1568.863978][ T29] audit: type=1326 audit(1771186302.057:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.9.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1569.789486][T18554] syzkaller0: entered promiscuous mode [ 1569.795202][T18554] syzkaller0: entered allmulticast mode [ 1570.474064][T18572] loop9: detected capacity change from 0 to 2048 [ 1570.702335][ T7724] loop9: p1 < > p2 p3 < p5 > [ 1570.712075][ T7724] loop9: partition table partially beyond EOD, truncated [ 1570.829278][ T7724] loop9: p1 start 4278190080 is beyond EOD, truncated [ 1570.836347][ T7724] loop9: p2 start 16908800 is beyond EOD, truncated [ 1570.940641][ T7724] loop9: p5 start 16908800 is beyond EOD, truncated [ 1570.984000][T18572] loop9: p1 < > p2 p3 < p5 > [ 1570.991755][T18572] loop9: partition table partially beyond EOD, truncated [ 1571.066012][T18572] loop9: p1 start 4278190080 is beyond EOD, truncated [ 1571.137898][T18572] loop9: p2 start 16908800 is beyond EOD, truncated [ 1571.204573][T18572] loop9: p5 start 16908800 is beyond EOD, truncated [ 1572.202402][T18591] loop9: detected capacity change from 0 to 128 [ 1572.280820][T18589] syzkaller0: entered promiscuous mode [ 1572.298461][T18589] syzkaller0: entered allmulticast mode [ 1573.292509][ T29] audit: type=1326 audit(1771186308.987:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1573.483291][ T29] audit: type=1326 audit(1771186308.987:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1573.788201][ T29] audit: type=1326 audit(1771186308.987:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1573.852853][ T7724] udevd[7724]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1574.063530][ T29] audit: type=1326 audit(1771186308.987:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1574.168155][ T29] audit: type=1326 audit(1771186308.987:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1574.243279][ T29] audit: type=1326 audit(1771186308.987:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1574.319708][ T29] audit: type=1326 audit(1771186308.987:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1574.482972][ T29] audit: type=1326 audit(1771186308.987:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1574.650335][ T29] audit: type=1326 audit(1771186308.987:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1574.811786][ T29] audit: type=1326 audit(1771186308.987:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18593 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1577.331555][T18629] syzkaller0: entered promiscuous mode [ 1577.430116][T18629] syzkaller0: entered allmulticast mode [ 1578.329149][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1578.329233][ T29] audit: type=1326 audit(1771186314.047:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1578.982298][T18647] loop9: detected capacity change from 0 to 512 [ 1579.037865][ T29] audit: type=1326 audit(1771186314.047:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.092401][T18647] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1579.167806][ T29] audit: type=1326 audit(1771186314.047:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.261254][ T29] audit: type=1326 audit(1771186314.047:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.284401][ T29] audit: type=1326 audit(1771186314.057:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.307797][ T29] audit: type=1326 audit(1771186314.057:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.341892][ T29] audit: type=1326 audit(1771186314.057:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.415163][T18647] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1579.436046][ T29] audit: type=1326 audit(1771186314.057:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.436312][ T29] audit: type=1326 audit(1771186314.087:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.436560][ T29] audit: type=1326 audit(1771186314.087:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1579.747505][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1579.754347][ C0] EXT4-fs (loop9): initial error at time 1771186315: ext4_mb_generate_buddy:1315 [ 1579.764080][ C0] EXT4-fs (loop9): last error at time 1771186315: ext4_mb_generate_buddy:1315 [ 1579.787949][T18647] EXT4-fs (loop9): Remounting filesystem read-only [ 1579.808784][T18647] EXT4-fs (loop9): 1 truncate cleaned up [ 1579.851035][T18647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.421342][T17919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.975627][T18680] syzkaller0: entered promiscuous mode [ 1583.090376][T18680] syzkaller0: entered allmulticast mode [ 1584.359890][T18693] loop4: detected capacity change from 0 to 512 [ 1584.461681][T18693] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1585.629696][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1585.629930][ T29] audit: type=1326 audit(1771186321.217:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1586.148921][T18693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1586.168643][ T29] audit: type=1326 audit(1771186321.227:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1586.377413][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1586.384283][ C1] EXT4-fs (loop4): initial error at time 1771186322: ext4_mb_generate_buddy:1315 [ 1586.393857][ C1] EXT4-fs (loop4): last error at time 1771186322: ext4_mb_generate_buddy:1315 [ 1586.418256][T18693] EXT4-fs (loop4): Remounting filesystem read-only [ 1586.538399][T18693] Quota error (device loop4): write_blk: dquota write failed [ 1586.598232][ T29] audit: type=1326 audit(1771186321.237:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1586.692116][T18693] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1586.808290][T18693] Quota error (device loop4): write_blk: dquota write failed [ 1586.816452][T18693] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1586.938272][ T29] audit: type=1326 audit(1771186321.237:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1587.068603][T18693] EXT4-fs (loop4): 1 truncate cleaned up [ 1587.225389][T18693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.270316][ T29] audit: type=1326 audit(1771186321.237:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1587.588745][ T29] audit: type=1326 audit(1771186321.247:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1588.291339][T14585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1588.728484][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1589.608383][T18720] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3977'. [ 1590.226976][T18727] syzkaller0: entered promiscuous mode [ 1590.253521][T18727] syzkaller0: entered allmulticast mode [ 1592.078598][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1592.079029][ T29] audit: type=1326 audit(1771186327.577:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1592.260310][T18737] loop8: detected capacity change from 0 to 512 [ 1592.416374][ T29] audit: type=1326 audit(1771186327.577:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1592.577984][ T29] audit: type=1326 audit(1771186327.587:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1592.817895][ T29] audit: type=1326 audit(1771186327.597:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1593.088019][T18737] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1593.205424][ T29] audit: type=1326 audit(1771186327.597:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1593.510715][T18737] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1593.611171][ T29] audit: type=1326 audit(1771186327.607:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1593.757524][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1593.764423][ C0] EXT4-fs (loop8): initial error at time 1771186329: ext4_mb_generate_buddy:1315 [ 1593.774219][ C0] EXT4-fs (loop8): last error at time 1771186329: ext4_mb_generate_buddy:1315 [ 1593.789507][ T29] audit: type=1326 audit(1771186327.607:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1593.818552][T18737] EXT4-fs (loop8): Remounting filesystem read-only [ 1593.825829][T18737] Quota error (device loop8): write_blk: dquota write failed [ 1593.941888][ T29] audit: type=1326 audit(1771186327.617:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.9.3983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1593.972717][T18737] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 1594.159164][T18737] EXT4-fs (loop8): 1 truncate cleaned up [ 1594.241046][T18737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.724503][T15421] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.979229][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3995'. [ 1598.235341][T18783] syzkaller0: entered promiscuous mode [ 1598.257864][T18783] syzkaller0: entered allmulticast mode [ 1599.554791][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1599.555029][ T29] audit: type=1326 audit(1771186335.047:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1600.231244][ T29] audit: type=1326 audit(1771186335.047:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1600.255977][ T29] audit: type=1326 audit(1771186335.057:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1600.281993][ T29] audit: type=1326 audit(1771186335.057:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1600.306087][ T29] audit: type=1326 audit(1771186335.067:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1601.405156][ T29] audit: type=1326 audit(1771186335.067:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1601.568121][ T29] audit: type=1326 audit(1771186335.077:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1601.717739][ T29] audit: type=1326 audit(1771186335.077:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1601.908134][ T29] audit: type=1326 audit(1771186335.077:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1602.093113][ T29] audit: type=1326 audit(1771186335.087:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18786 comm="syz.8.3999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1602.618555][T18796] loop7: detected capacity change from 0 to 512 [ 1602.680634][T18796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1602.833360][T18796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1602.929104][T18796] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1603.203259][T18796] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4224: comm syz.7.4003: Allocating blocks 41-42 which overlap fs metadata [ 1603.297750][T18796] loop7: lost filesystem error report for type 5 error -117 [ 1603.307525][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1603.321868][ C0] EXT4-fs (loop7): initial error at time 1771186339: ext4_mb_mark_diskspace_used:4224 [ 1603.331684][ C0] EXT4-fs (loop7): last error at time 1771186339: ext4_mb_mark_diskspace_used:4224 [ 1603.359008][T18796] EXT4-fs (loop7): Remounting filesystem read-only [ 1603.405816][T18796] EXT4-fs (loop7): 1 truncate cleaned up [ 1603.471803][T18796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.179479][T15986] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.037955][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1608.038113][ T29] audit: type=1326 audit(1771186342.897:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1609.112743][ T29] audit: type=1326 audit(1771186342.907:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1609.298060][ T29] audit: type=1326 audit(1771186342.917:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1609.448655][ T29] audit: type=1326 audit(1771186342.917:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1609.508415][ T29] audit: type=1326 audit(1771186342.917:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1609.546317][T18829] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4012'. [ 1609.688363][ T29] audit: type=1326 audit(1771186342.917:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1609.810187][ T29] audit: type=1326 audit(1771186342.927:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1609.933573][ T29] audit: type=1326 audit(1771186342.927:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1610.094616][ T29] audit: type=1326 audit(1771186342.937:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1610.318440][T16962] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1610.330853][ T29] audit: type=1326 audit(1771186342.937:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1610.609976][T16962] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1610.646418][T16962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.699575][T16962] usb 5-1: Product: syz [ 1610.703972][T16962] usb 5-1: Manufacturer: syz [ 1610.753869][T16962] usb 5-1: SerialNumber: syz [ 1611.103587][T16962] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1611.118674][T16962] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1611.136396][T16962] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1611.411444][T16962] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1611.738522][T16962] usb 5-1: USB disconnect, device number 2 [ 1612.364918][T18838] syzkaller0: entered promiscuous mode [ 1612.439050][T18838] syzkaller0: entered allmulticast mode [ 1612.834467][T18847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1612.886163][T18847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1612.916180][T18847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1612.988924][T18847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1613.024157][T18847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1614.118165][T18842] Bluetooth: hci2: command 0x0406 tx timeout [ 1614.425055][T18861] loop8: detected capacity change from 0 to 256 [ 1615.461832][T15719] Bluetooth: hci1: command tx timeout [ 1616.467805][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1616.467889][ T29] audit: type=1326 audit(1771186351.327:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1617.477635][T15719] Bluetooth: hci1: command tx timeout [ 1617.525187][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.532726][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.610485][ T29] audit: type=1326 audit(1771186351.337:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1617.847883][ T29] audit: type=1326 audit(1771186351.337:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1617.967655][ T29] audit: type=1326 audit(1771186351.347:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1618.076548][ T29] audit: type=1326 audit(1771186351.347:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1618.278004][ T29] audit: type=1326 audit(1771186351.357:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1618.305863][ T29] audit: type=1326 audit(1771186351.357:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1618.331159][ T29] audit: type=1326 audit(1771186351.357:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1618.363149][ T29] audit: type=1326 audit(1771186351.367:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1618.607616][ T29] audit: type=1326 audit(1771186351.377:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.9.4024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 1619.073095][T18882] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4026'. [ 1619.558235][T15719] Bluetooth: hci1: command tx timeout [ 1620.437809][T18844] chnl_net:caif_netlink_parms(): no params data found [ 1621.231846][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4032'. [ 1621.638545][T15719] Bluetooth: hci1: command tx timeout [ 1621.948133][ T8793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.453043][ T8793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.805305][ T8793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.079502][ T8793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.393934][T18907] sctp: [Deprecated]: syz.9.4034 (pid 18907) Use of int in max_burst socket option. [ 1623.393934][T18907] Use struct sctp_assoc_value instead [ 1623.752009][T18844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.810393][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.874957][T18844] bridge_slave_0: entered allmulticast mode [ 1623.941325][T18844] bridge_slave_0: entered promiscuous mode [ 1624.002222][T18844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.042720][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.088493][T18844] bridge_slave_1: entered allmulticast mode [ 1624.131811][T18844] bridge_slave_1: entered promiscuous mode [ 1624.910817][T18932] loop8: detected capacity change from 0 to 128 [ 1624.956591][T18932] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1624.984401][T18932] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.410083][T18844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.780688][T15421] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1625.881859][T18844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.443704][T18844] team0: Port device team_slave_0 added [ 1626.570737][T18844] team0: Port device team_slave_1 added [ 1626.577200][ T8793] bridge_slave_1: left allmulticast mode [ 1626.627722][ T8793] bridge_slave_1: left promiscuous mode [ 1626.678788][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.759506][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4045'. [ 1626.788997][ T8793] bridge_slave_0: left allmulticast mode [ 1626.794897][ T8793] bridge_slave_0: left promiscuous mode [ 1626.820640][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.068174][ T8793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.179631][ T8793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.224399][ T8793] bond0 (unregistering): Released all slaves [ 1629.984587][T18844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.014400][T18844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.097579][T18844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.468547][T18844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.527610][T18844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.692269][T18844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.562354][T18987] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4057'. [ 1632.377823][ T8793] hsr_slave_0: left promiscuous mode [ 1632.429594][ T8793] hsr_slave_1: left promiscuous mode [ 1632.508216][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1632.515830][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1632.636370][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1632.661372][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.796847][ T8793] veth1_macvtap: left promiscuous mode [ 1632.826097][ T8793] veth0_macvtap: left promiscuous mode [ 1632.861205][ T8793] veth1_vlan: left promiscuous mode [ 1632.893645][ T8793] veth0_vlan: left promiscuous mode [ 1634.220237][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4066'. [ 1635.045425][ T8793] team0 (unregistering): Port device team_slave_1 removed [ 1635.105875][ T8793] team0 (unregistering): Port device team_slave_0 removed [ 1635.698099][T18844] hsr_slave_0: entered promiscuous mode [ 1635.739901][T18844] hsr_slave_1: entered promiscuous mode [ 1635.945465][T18997] team0: entered promiscuous mode [ 1635.980122][T18997] team_slave_0: entered promiscuous mode [ 1635.986687][T18997] team_slave_1: entered promiscuous mode [ 1636.025984][T18997] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1639.952749][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4081'. [ 1640.899631][T18844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1641.059574][T18844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1641.206380][T18844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1641.464443][T18844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1642.892443][T19102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1643.663382][T18844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.002374][T18844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.205089][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.212801][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.536168][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.543845][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.741549][T15461] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1645.046709][T15461] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1645.089281][T15461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.126227][T15461] usb 9-1: Product: syz [ 1645.132695][T15461] usb 9-1: Manufacturer: syz [ 1645.142254][T15461] usb 9-1: SerialNumber: syz [ 1645.212063][T15461] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1645.339078][T19124] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4095'. [ 1645.440764][T16962] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1646.689413][T16962] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1646.769318][T16962] ath9k_htc: Failed to initialize the device [ 1646.830905][T13449] usb 9-1: USB disconnect, device number 13 [ 1646.975609][T13449] usb 9-1: ath9k_htc: USB layer deinitialized [ 1648.454879][T16962] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1648.586619][T19148] 9pnet_fd: Insufficient options for proto=fd [ 1648.696759][T16962] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1648.726020][T16962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.779143][T16962] usb 9-1: Product: syz [ 1648.783649][T16962] usb 9-1: Manufacturer: syz [ 1648.817849][T16962] usb 9-1: SerialNumber: syz [ 1649.104696][T18844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.132502][T16962] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1649.204477][T16962] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1649.238980][T16962] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1649.411512][T16962] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1649.542170][T16962] usb 9-1: USB disconnect, device number 14 [ 1649.925187][T19155] loop9: detected capacity change from 0 to 512 [ 1650.032720][T19155] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1650.126282][T18844] veth0_vlan: entered promiscuous mode [ 1650.258843][T18844] veth1_vlan: entered promiscuous mode [ 1650.427881][T19155] EXT4-fs (loop9): 1 truncate cleaned up [ 1650.435967][T19155] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1650.634534][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1650.634615][ T29] audit: type=1800 audit(1771186386.357:464): pid=19155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4103" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1650.847201][T18844] veth0_macvtap: entered promiscuous mode [ 1651.028954][T18844] veth1_macvtap: entered promiscuous mode [ 1651.152995][T17919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.453087][T18844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1651.613210][T18844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.968560][ T8496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.041244][ T8496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.144435][ T8496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.170400][T19172] loop9: detected capacity change from 0 to 512 [ 1652.202634][T15889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.226233][T19172] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1652.407399][T19179] 9pnet_fd: Insufficient options for proto=fd [ 1652.429072][T19172] EXT4-fs (loop9): 1 truncate cleaned up [ 1652.490742][T19172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1652.588634][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4109'. [ 1653.844673][T19194] loop4: detected capacity change from 0 to 1024 [ 1655.169547][T17919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1655.431414][T19206] loop7: detected capacity change from 0 to 1024 [ 1655.529586][ T67] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.663268][T19206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1655.856351][ T67] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.978195][T19206] loop7: detected capacity change from 1024 to 64 [ 1656.163377][ T67] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.186069][T19206] Dev loop7: unable to read RDB block 8 [ 1656.251840][T19206] loop7: unable to read partition table [ 1656.298725][T19206] loop_reread_partitions: partition scan of loop7 (ï5ŸA;¹8R÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 1656.551761][ T67] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.348850][T15986] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /159/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 1657.608823][ T67] bridge_slave_1: left allmulticast mode [ 1657.615084][ T67] bridge_slave_1: left promiscuous mode [ 1657.648625][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.796708][ T67] bridge_slave_0: left allmulticast mode [ 1657.850202][T15986] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.858812][ T67] bridge_slave_0: left promiscuous mode [ 1657.888694][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.032720][T19209] kmmpd-loop7: attempt to access beyond end of device [ 1658.032720][T19209] loop7: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 1658.064159][T19209] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 1659.301942][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.389545][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.447008][ T67] bond0 (unregistering): Released all slaves [ 1660.459563][T18842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1660.480364][T18842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1660.501951][T18842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1660.531468][T18842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1660.543405][T18842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1660.928208][ T67] hsr_slave_0: left promiscuous mode [ 1661.023995][ T67] hsr_slave_1: left promiscuous mode [ 1661.054707][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.077822][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.122453][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.166539][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.263130][ T67] veth1_macvtap: left promiscuous mode [ 1661.310675][T15719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1661.318323][ T67] veth0_macvtap: left promiscuous mode [ 1661.318686][ T67] veth1_vlan: left promiscuous mode [ 1661.318933][ T67] veth0_vlan: left promiscuous mode [ 1661.349786][T15719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1661.361594][T15719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1661.404460][T15719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1661.422284][T15719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1662.599380][T18842] Bluetooth: hci0: command tx timeout [ 1662.653266][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1662.718078][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1663.153432][T15719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1663.170186][T15719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1663.184119][T15719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1663.248987][T15719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1663.298369][T15719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1663.488412][T18842] Bluetooth: hci2: command tx timeout [ 1664.677785][T18842] Bluetooth: hci0: command tx timeout [ 1665.144585][ T67] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.397982][T18842] Bluetooth: hci3: command tx timeout [ 1665.465805][ T67] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.557954][T18842] Bluetooth: hci2: command tx timeout [ 1665.892222][ T67] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.379342][ T67] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.454402][ T8496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.492473][ T8496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.768378][T18842] Bluetooth: hci0: command tx timeout [ 1667.069227][ T8496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.148580][ T8496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.328347][T19235] chnl_net:caif_netlink_parms(): no params data found [ 1667.480111][T18842] Bluetooth: hci3: command tx timeout [ 1667.637737][T18842] Bluetooth: hci2: command tx timeout [ 1668.038633][T19244] chnl_net:caif_netlink_parms(): no params data found [ 1668.431997][T19249] chnl_net:caif_netlink_parms(): no params data found [ 1668.842496][T18842] Bluetooth: hci0: command tx timeout [ 1669.178597][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.561715][T18842] Bluetooth: hci3: command tx timeout [ 1669.717728][T18842] Bluetooth: hci2: command tx timeout [ 1669.816392][T19316] syzkaller0: entered promiscuous mode [ 1669.830371][T19316] syzkaller0: entered allmulticast mode [ 1669.908105][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.379007][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.942816][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.995155][T19235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.048392][T19235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.070590][T19235] bridge_slave_0: entered allmulticast mode [ 1671.128255][T19235] bridge_slave_0: entered promiscuous mode [ 1671.146703][T19337] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1671.153512][T19337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1671.193390][T19235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.207887][T19235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.215770][T19235] bridge_slave_1: entered allmulticast mode [ 1671.237791][T19337] vhci_hcd vhci_hcd.0: Device attached [ 1671.265313][T19343] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1671.272096][T19343] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1671.309850][T19235] bridge_slave_1: entered promiscuous mode [ 1671.388596][T19343] vhci_hcd vhci_hcd.0: Device attached [ 1671.426180][T19337] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(11) [ 1671.433107][T19337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1671.505986][T19337] vhci_hcd vhci_hcd.0: Device attached [ 1671.519341][T19343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1671.592223][T19337] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(15) [ 1671.599196][T19337] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1671.613971][T15461] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1671.619979][T19337] vhci_hcd vhci_hcd.0: Device attached [ 1671.637748][T18842] Bluetooth: hci3: command tx timeout [ 1671.699967][T19337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1671.733337][T19337] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(19) [ 1671.740294][T19337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1671.775249][T19235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.787017][T19343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1671.818241][T19337] vhci_hcd vhci_hcd.0: Device attached [ 1672.052591][T18842] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1672.113161][T19249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.129569][T19249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.139609][T19249] bridge_slave_0: entered allmulticast mode [ 1672.150778][T19249] bridge_slave_0: entered promiscuous mode [ 1672.162545][T19351] vhci_hcd: connection closed [ 1672.163126][T19349] vhci_hcd: connection closed [ 1672.168212][T19344] vhci_hcd: connection closed [ 1672.174781][T19346] vhci_hcd: connection closed [ 1672.182494][T19341] vhci_hcd: connection reset by peer [ 1672.204612][T15889] vhci_hcd vhci_hcd.8: stop threads [ 1672.226850][T15889] vhci_hcd vhci_hcd.8: release socket [ 1672.248707][T15889] vhci_hcd vhci_hcd.8: disconnect device [ 1672.260170][T15889] vhci_hcd vhci_hcd.8: stop threads [ 1672.265624][T15889] vhci_hcd vhci_hcd.8: release socket [ 1672.282051][T19235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.298291][T15889] vhci_hcd vhci_hcd.8: disconnect device [ 1672.312471][T19244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.325788][T15889] vhci_hcd vhci_hcd.8: stop threads [ 1672.343947][T15889] vhci_hcd vhci_hcd.8: release socket [ 1672.350285][T19244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.357858][T15889] vhci_hcd vhci_hcd.8: disconnect device [ 1672.365215][T15889] vhci_hcd vhci_hcd.8: stop threads [ 1672.385754][T19244] bridge_slave_0: entered allmulticast mode [ 1672.394237][T15889] vhci_hcd vhci_hcd.8: release socket [ 1672.421884][T19244] bridge_slave_0: entered promiscuous mode [ 1672.423836][T15889] vhci_hcd vhci_hcd.8: disconnect device [ 1672.456034][T15889] vhci_hcd vhci_hcd.8: stop threads [ 1672.463782][T15889] vhci_hcd vhci_hcd.8: release socket [ 1672.486335][T15889] vhci_hcd vhci_hcd.8: disconnect device [ 1672.539163][T19249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.546726][T19249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.598730][T19249] bridge_slave_1: entered allmulticast mode [ 1672.630263][T19249] bridge_slave_1: entered promiscuous mode [ 1672.698599][T19337] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1672.699957][T19343] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1672.769776][T19343] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1672.834512][T19343] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1672.895243][T19343] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1672.931624][T19343] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1672.944979][T19244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.958724][T19244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.973889][T19244] bridge_slave_1: entered allmulticast mode [ 1672.992415][T19244] bridge_slave_1: entered promiscuous mode [ 1673.003490][T19343] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1673.035519][T19343] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.045341][T19343] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1673.068743][T19343] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1673.092259][T19343] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1673.133664][T19343] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1673.170636][T19362] netlink: 'syz.2.4138': attribute type 21 has an invalid length. [ 1673.177020][T19343] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1673.188270][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'. [ 1673.647054][T19362] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1673.752728][T19249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.809383][T19249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.853005][T19235] team0: Port device team_slave_0 added [ 1673.895860][T19235] team0: Port device team_slave_1 added [ 1673.978046][T19244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.419620][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4140'. [ 1674.447935][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4140'. [ 1674.628426][T19244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.838607][T18842] Bluetooth: hci1: command 0x0c1a tx timeout [ 1674.841452][T15719] Bluetooth: hci4: command 0x0406 tx timeout [ 1674.954488][T19249] team0: Port device team_slave_0 added [ 1674.990146][T19376] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 1675.018171][T19376] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 1675.080005][T15719] Bluetooth: hci2: command 0x0c1a tx timeout [ 1675.157599][T15719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1675.300860][T19378] netlink: 'syz.8.4141': attribute type 1 has an invalid length. [ 1675.494316][T19244] team0: Port device team_slave_0 added [ 1675.601866][T19249] team0: Port device team_slave_1 added [ 1675.631825][T19235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.668649][T19235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.767568][T19235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.812794][ T67] bridge_slave_1: left allmulticast mode [ 1675.827996][ T67] bridge_slave_1: left promiscuous mode [ 1675.844196][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.907982][ T67] bridge_slave_0: left allmulticast mode [ 1675.929405][ T67] bridge_slave_0: left promiscuous mode [ 1675.951370][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.001767][ T67] bridge_slave_1: left allmulticast mode [ 1676.011062][ T67] bridge_slave_1: left promiscuous mode [ 1676.023723][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.068444][ T67] bridge_slave_0: left allmulticast mode [ 1676.111280][ T67] bridge_slave_0: left promiscuous mode [ 1676.119472][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.758680][T15461] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1676.918992][T15719] Bluetooth: hci1: command 0x0c1a tx timeout [ 1677.158638][T15719] Bluetooth: hci2: command 0x0c1a tx timeout [ 1677.237670][T15719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1677.704260][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1677.781669][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.841450][ T67] bond0 (unregistering): Released all slaves [ 1678.103676][T16962] usb usb50-port1: attempt power cycle [ 1678.443625][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.514862][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.539373][ T67] bond0 (unregistering): Released all slaves [ 1678.591383][T19244] team0: Port device team_slave_1 added [ 1678.632226][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.632517][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.716866][T16962] usb usb50-port1: unable to enumerate USB device [ 1678.998164][T15719] Bluetooth: hci1: command 0x0c1a tx timeout [ 1679.049133][T19235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.056305][T19235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.091211][T19235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.241974][T15719] Bluetooth: hci2: command 0x0c1a tx timeout [ 1679.318615][T15719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1679.630986][T19244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.697948][T19244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.772534][T19244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.825261][T19244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.867765][T19244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.938908][T19244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.998374][T19249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.005686][T19249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.081410][T19249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.200912][T19249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.267467][T19249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.397462][T19249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.720675][T16963] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1680.937836][T16963] usb 9-1: config 0 has no interfaces? [ 1680.955245][T16963] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1680.968583][T16963] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.976959][T16963] usb 9-1: Product: syz [ 1680.981581][T16963] usb 9-1: Manufacturer: syz [ 1680.987240][T16963] usb 9-1: SerialNumber: syz [ 1681.033912][T16963] usb 9-1: config 0 descriptor?? [ 1681.175928][T19235] hsr_slave_0: entered promiscuous mode [ 1681.196129][T19235] hsr_slave_1: entered promiscuous mode [ 1681.221086][T19235] debugfs: 'hsr0' already exists in 'hsr' [ 1681.227053][T19235] Cannot create hsr debugfs directory [ 1682.044334][T19244] hsr_slave_0: entered promiscuous mode [ 1682.064961][T19244] hsr_slave_1: entered promiscuous mode [ 1682.086607][T19244] debugfs: 'hsr0' already exists in 'hsr' [ 1682.103213][T19244] Cannot create hsr debugfs directory [ 1682.271857][T19249] hsr_slave_0: entered promiscuous mode [ 1682.285925][T19249] hsr_slave_1: entered promiscuous mode [ 1682.302107][T19249] debugfs: 'hsr0' already exists in 'hsr' [ 1682.309036][T19249] Cannot create hsr debugfs directory [ 1683.167057][ T795] usb 9-1: USB disconnect, device number 15 [ 1683.671976][ T67] hsr_slave_0: left promiscuous mode [ 1683.684209][ T67] hsr_slave_1: left promiscuous mode [ 1683.715617][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1683.765253][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.823222][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1683.844298][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.929890][ T67] hsr_slave_0: left promiscuous mode [ 1683.944473][ T67] hsr_slave_1: left promiscuous mode [ 1683.953044][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1684.028039][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.083333][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1684.211831][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1684.328668][ T67] veth1_macvtap: left promiscuous mode [ 1684.334469][ T67] veth0_macvtap: left promiscuous mode [ 1684.347936][ T67] veth1_vlan: left promiscuous mode [ 1684.354509][ T67] veth0_vlan: left promiscuous mode [ 1684.407783][ T67] veth1_macvtap: left promiscuous mode [ 1684.413765][ T67] veth0_macvtap: left promiscuous mode [ 1684.439077][ T67] veth1_vlan: left promiscuous mode [ 1684.458865][ T67] veth0_vlan: left promiscuous mode [ 1687.580176][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1687.720719][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1689.140778][ T67] team_slave_1 (unregistering): left promiscuous mode [ 1689.213951][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1689.265887][ T67] team_slave_0 (unregistering): left promiscuous mode [ 1689.335616][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1693.200485][ T67] IPVS: stop unused estimator thread 0... [ 1695.325947][T19546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.405936][T19546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.451355][T19546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.502307][T19546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.586096][T19249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1695.636455][T19249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1695.705743][T19249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1695.757905][T19249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1696.144749][T19244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1696.290982][T19244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1696.447982][T19244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1696.645382][T19244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1696.780146][T19235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1696.954227][T19235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1697.192376][T19235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1697.353731][T19235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1698.303702][T19249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.703340][T19249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.912625][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.920352][ T8793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.193934][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.201980][ T8793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.386108][T19244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.732672][T19244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.920842][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.928691][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.232466][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.240224][ T8793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.680242][T19235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.290688][T19235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.361145][T19612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.452663][T19607] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1701.490436][T19607] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1701.534347][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.542033][ T8747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.581634][ T67] wlan1: authenticated [ 1701.600679][ T795] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 1701.641969][ T8496] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1701.650352][T19612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.749018][T19607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.810053][ T67] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 1701.820922][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.828542][ T8747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.929922][ T67] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 1702.077630][ T8747] wlan1: association with 08:02:11:00:00:00 timed out [ 1703.177743][T19249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.406188][T19249] veth0_vlan: entered promiscuous mode [ 1704.467212][T19636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1704.474780][T19636] IPv6: NLM_F_CREATE should be set when creating new route [ 1704.614651][T19244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.717031][T19249] veth1_vlan: entered promiscuous mode [ 1705.222041][T19235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1705.526734][T19249] veth0_macvtap: entered promiscuous mode [ 1705.661301][T19249] veth1_macvtap: entered promiscuous mode [ 1706.107827][T19249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.244808][T19249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.556977][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.613696][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.671797][T19235] veth0_vlan: entered promiscuous mode [ 1706.721669][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.772518][ T8747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.863988][T19235] veth1_vlan: entered promiscuous mode [ 1707.591155][T19235] veth0_macvtap: entered promiscuous mode [ 1707.842661][T19235] veth1_macvtap: entered promiscuous mode [ 1707.922446][T19244] veth0_vlan: entered promiscuous mode [ 1708.156751][T19235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1708.244086][T19244] veth1_vlan: entered promiscuous mode [ 1708.383457][T19235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1708.649054][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.705394][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.744972][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.781192][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.985558][T19244] veth0_macvtap: entered promiscuous mode [ 1709.141468][T19244] veth1_macvtap: entered promiscuous mode [ 1709.440187][T19244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1709.574811][T19244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1709.736597][ T164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.771150][ T164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.814577][ T164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.912566][ T164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.229018][T19684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1714.411900][T19709] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1714.418698][T19709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1714.528742][T19714] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 1714.535614][T19714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1714.575161][T19709] vhci_hcd vhci_hcd.0: Device attached [ 1714.633146][T13449] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1714.648847][T19713] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1714.655678][T19713] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1714.686458][T19714] vhci_hcd vhci_hcd.0: Device attached [ 1714.725381][T19709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1714.760232][T19713] vhci_hcd vhci_hcd.0: Device attached [ 1714.858491][T19709] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 1714.865383][T19709] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1714.903623][T16963] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1714.943577][T13449] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1714.957628][ T8793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.976722][T19713] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1714.985413][T13449] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.014355][ T8793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.027786][T13449] usb 9-1: Product: syz [ 1715.032214][T13449] usb 9-1: Manufacturer: syz [ 1715.037023][T13449] usb 9-1: SerialNumber: syz [ 1715.058041][T19709] vhci_hcd vhci_hcd.0: Device attached [ 1715.100459][T19709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1715.135502][T13449] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1715.229437][ T5822] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1715.272955][T19714] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 1715.279842][T19714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1715.452274][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.495429][T19714] vhci_hcd vhci_hcd.0: Device attached [ 1715.527692][T16962] usb 9-1: USB disconnect, device number 16 [ 1715.580593][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.778376][T15719] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1715.887182][T19721] vhci_hcd: connection closed [ 1715.888542][T19723] vhci_hcd: connection closed [ 1715.897795][ T8747] vhci_hcd vhci_hcd.2: stop threads [ 1715.920119][T19715] vhci_hcd: connection closed [ 1715.920414][T19717] vhci_hcd: connection closed [ 1715.928146][T19711] vhci_hcd: connection reset by peer [ 1715.982135][ T8747] vhci_hcd vhci_hcd.2: release socket [ 1716.009069][ T8747] vhci_hcd vhci_hcd.2: disconnect device [ 1716.046557][ T8747] vhci_hcd vhci_hcd.2: stop threads [ 1716.077892][ T8747] vhci_hcd vhci_hcd.2: release socket [ 1716.101257][ T8747] vhci_hcd vhci_hcd.2: disconnect device [ 1716.121804][ T8747] vhci_hcd vhci_hcd.2: stop threads [ 1716.158031][ T8747] vhci_hcd vhci_hcd.2: release socket [ 1716.168993][ T8747] vhci_hcd vhci_hcd.2: disconnect device [ 1716.208022][ T8747] vhci_hcd vhci_hcd.2: stop threads [ 1716.213542][ T8747] vhci_hcd vhci_hcd.2: release socket [ 1716.293252][ T8747] vhci_hcd vhci_hcd.2: disconnect device [ 1716.301805][ T8747] vhci_hcd vhci_hcd.2: stop threads [ 1716.337558][ T8747] vhci_hcd vhci_hcd.2: release socket [ 1716.362122][ T8747] vhci_hcd vhci_hcd.2: disconnect device [ 1716.444894][T19709] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1716.450490][T19713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1716.464277][T19713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1716.500222][T19713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1716.549131][T19713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1716.555634][ T5822] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1716.556660][T19713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1716.654645][ T5822] ath9k_htc: Failed to initialize the device [ 1716.734141][T16962] usb 9-1: ath9k_htc: USB layer deinitialized [ 1717.589169][ T8496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.651090][ T8496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.798548][T18842] Bluetooth: hci4: command 0x0c1a tx timeout [ 1717.934732][T19749] loop0: detected capacity change from 0 to 256 [ 1717.987142][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.042622][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.217888][T19749] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1718.521633][T18842] Bluetooth: hci1: command 0x0c1a tx timeout [ 1718.549888][ T8496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.574181][ T8496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.595243][ T29] audit: type=1804 audit(1771186454.317:465): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4196" name="/newroot/1/file2/bus" dev="loop0" ino=1048722 res=1 errno=0 [ 1718.622566][T18842] Bluetooth: hci3: command 0x0c1a tx timeout [ 1718.629368][T15719] Bluetooth: hci2: command 0x0c1a tx timeout [ 1718.684538][T19756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1718.692222][T19756] IPv6: NLM_F_CREATE should be set when creating new route [ 1719.207807][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.215868][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.691133][T19766] 9pnet_fd: Insufficient options for proto=fd [ 1720.062596][T16963] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1720.447759][T19770] loop2: detected capacity change from 0 to 2048 [ 1720.688314][T19770] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 1720.768412][T19770] System zones: 0-7 [ 1720.830709][T19770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1721.097764][ T7767] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1721.362677][T19770] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4202: bg 0: block 234: padding at end of block bitmap is not set [ 1721.407783][ T7767] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1721.444572][ T795] usb usb38-port1: attempt power cycle [ 1721.464851][ T7767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.506477][T19770] EXT4-fs (loop2): Remounting filesystem read-only [ 1721.573443][ T7767] usb 9-1: Product: syz [ 1721.593086][ T7767] usb 9-1: Manufacturer: syz [ 1721.627781][ T7767] usb 9-1: SerialNumber: syz [ 1721.740046][ T7767] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1721.875697][T16963] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1722.025976][T18844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.177766][ T5822] usb 9-1: USB disconnect, device number 17 [ 1722.188375][ T795] usb usb38-port1: unable to enumerate USB device [ 1722.637091][T15719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1722.659123][T15719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1722.674242][T15719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1722.699874][T15719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1722.716497][T15719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1723.169006][T16963] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1723.176798][T16963] ath9k_htc: Failed to initialize the device [ 1723.274265][ T5822] usb 9-1: ath9k_htc: USB layer deinitialized [ 1723.687111][T19803] loop8: detected capacity change from 0 to 256 [ 1723.954260][T19804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1724.033676][T19804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1724.070931][T19804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1724.152692][T19804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1724.171617][T19809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1724.179215][T19809] IPv6: NLM_F_CREATE should be set when creating new route [ 1724.188149][T19803] loop8: detected capacity change from 256 to 0 [ 1724.251233][T19804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1724.294970][T19804] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1724.361397][T19804] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1724.588326][T19804] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1725.183897][T15421] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 1726.008010][T19793] chnl_net:caif_netlink_parms(): no params data found [ 1726.125829][T15719] Bluetooth: hci1: command 0x0c1a tx timeout [ 1726.199112][T15719] Bluetooth: hci2: command 0x0c1a tx timeout [ 1726.278436][T15719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1726.315933][ T164] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.365189][T15719] Bluetooth: hci5: command 0x041b tx timeout [ 1726.896036][ T164] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.794116][ T164] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.809628][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1728.150544][ T5822] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1728.196779][ T164] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.207909][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.208064][ T5822] usb 2-1: Product: syz [ 1728.208167][ T5822] usb 2-1: Manufacturer: syz [ 1728.208279][ T5822] usb 2-1: SerialNumber: syz [ 1728.321536][ T5822] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1728.439716][T13449] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1728.449782][T15719] Bluetooth: hci5: command 0x041b tx timeout [ 1729.648909][T13449] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1729.709788][T13449] ath9k_htc: Failed to initialize the device [ 1729.905219][T13449] usb 2-1: ath9k_htc: USB layer deinitialized [ 1730.093780][T19793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.115471][T19793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.146685][T19793] bridge_slave_0: entered allmulticast mode [ 1730.183096][T19793] bridge_slave_0: entered promiscuous mode [ 1730.249309][ T164] bridge_slave_1: left allmulticast mode [ 1730.255429][ T164] bridge_slave_1: left promiscuous mode [ 1730.280748][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.302231][ T164] bridge_slave_0: left allmulticast mode [ 1730.308564][ T164] bridge_slave_0: left promiscuous mode [ 1730.315327][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.519498][T15719] Bluetooth: hci5: command 0x041b tx timeout [ 1731.594280][T19863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1731.633862][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.777194][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.911841][ T164] bond0 (unregistering): Released all slaves [ 1732.059368][ T164] bond1 (unregistering): Released all slaves [ 1732.169448][T19793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.177009][T19793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.279961][T19793] bridge_slave_1: entered allmulticast mode [ 1732.395449][T19793] bridge_slave_1: entered promiscuous mode [ 1732.598000][T15719] Bluetooth: hci5: command 0x041b tx timeout [ 1732.722453][T16963] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1732.787682][T19870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1732.906615][T18842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1732.917912][T16963] usb 3-1: Using ep0 maxpacket: 32 [ 1732.932167][T18842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1732.952348][T18842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1732.986746][T18842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1732.996515][T16963] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.046554][T18842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1733.061201][T16963] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.087569][T16963] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1733.094503][T16963] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1733.108377][T16963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.140875][T16963] usb 3-1: config 0 descriptor?? [ 1733.516569][T19793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.615189][T19793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.673192][T16963] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 1733.727681][T16963] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 1733.755863][T16963] hid-steam 0003:28DE:1205.0006: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 1733.877876][T16963] hid-steam 0003:28DE:1205.0006: Steam Controller 'XXXXXXXXXX' connected [ 1733.973095][T16963] input: Steam Deck as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0006/input/input21 [ 1734.124903][T16963] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0006/input/input22 [ 1734.410427][T16963] hid-steam 0003:28DE:1205.0007: unknown main item tag 0x0 [ 1734.439518][T16963] hid-steam 0003:28DE:1205.0007: unknown main item tag 0x0 [ 1734.485176][T19793] team0: Port device team_slave_0 added [ 1734.545707][T16963] hid-steam 0003:28DE:1205.0007: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 1734.651863][T19793] team0: Port device team_slave_1 added [ 1734.677614][T18842] Bluetooth: hci5: command 0x041b tx timeout [ 1734.729451][T16963] usb 3-1: USB disconnect, device number 4 [ 1735.159179][T18842] Bluetooth: hci2: command tx timeout [ 1735.445274][ T164] hsr_slave_0: left promiscuous mode [ 1735.493485][ T164] hsr_slave_1: left promiscuous mode [ 1735.546857][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.582102][T16963] hid-steam 0003:28DE:1205.0006: Steam Controller 'XXXXXXXXXX' disconnected [ 1735.619401][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.636708][T19878] fido_id[19878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1735.655200][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.675619][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.757180][ T164] veth1_macvtap: left promiscuous mode [ 1735.774675][ T164] veth0_macvtap: left promiscuous mode [ 1735.782223][ T164] veth1_vlan: left promiscuous mode [ 1735.802526][ T164] veth0_vlan: left promiscuous mode [ 1736.558792][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1736.574476][T19887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1736.582174][T19887] IPv6: NLM_F_CREATE should be set when creating new route [ 1736.758436][T18842] Bluetooth: hci5: command 0x041b tx timeout [ 1736.810997][ T164] team0 (unregistering): Port device team_slave_1 removed [ 1736.863065][ T164] team0 (unregistering): Port device team_slave_0 removed [ 1737.237655][T18842] Bluetooth: hci2: command tx timeout [ 1737.299168][T19793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.321021][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.443743][T19793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.494508][T19793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.558617][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.677880][T19793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.219642][T19793] hsr_slave_0: entered promiscuous mode [ 1738.283340][T19793] hsr_slave_1: entered promiscuous mode [ 1738.316662][T19793] debugfs: 'hsr0' already exists in 'hsr' [ 1738.336353][T19793] Cannot create hsr debugfs directory [ 1738.837892][T18842] Bluetooth: hci5: command 0x041b tx timeout [ 1738.853985][ T795] usb 2-1: USB disconnect, device number 3 [ 1738.889812][T19843] mpoa:mpoad_close: () going down [ 1738.958750][ T164] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.311146][T19908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1739.318841][T18842] Bluetooth: hci2: command tx timeout [ 1739.609064][ T164] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.995940][ T164] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.068408][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.075919][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.329085][ T164] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.398257][T18842] Bluetooth: hci2: command tx timeout [ 1742.398613][ T164] bridge_slave_1: left allmulticast mode [ 1742.421769][ T164] bridge_slave_1: left promiscuous mode [ 1742.456727][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.561307][ T164] bridge_slave_0: left allmulticast mode [ 1742.579734][ T164] bridge_slave_0: left promiscuous mode [ 1742.586684][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.920132][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.998397][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.033986][ T164] bond0 (unregistering): Released all slaves [ 1745.138060][T16963] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1745.393666][T16963] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1745.432420][T19964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1745.435421][T16963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.462050][T16963] usb 2-1: Product: syz [ 1745.466581][T16963] usb 2-1: Manufacturer: syz [ 1745.467741][ T164] hsr_slave_0: left promiscuous mode [ 1745.482967][ T164] hsr_slave_1: left promiscuous mode [ 1745.494183][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.527580][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.533672][T16963] usb 2-1: SerialNumber: syz [ 1745.553742][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.584422][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.599789][T16963] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1745.713325][ T7767] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1745.738495][ T164] veth1_macvtap: left promiscuous mode [ 1745.787478][ T164] veth0_macvtap: left promiscuous mode [ 1745.821480][ T164] veth1_vlan: left promiscuous mode [ 1745.873003][ T164] veth0_vlan: left promiscuous mode [ 1746.900991][T19956] mpoa:mpoad_close: () going down [ 1746.913316][ T795] usb 2-1: USB disconnect, device number 4 [ 1747.002595][ T7767] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1747.030623][ T7767] ath9k_htc: Failed to initialize the device [ 1747.086560][ T795] usb 2-1: ath9k_htc: USB layer deinitialized [ 1748.779604][ T164] team0 (unregistering): Port device team_slave_1 removed [ 1748.862499][ T164] team0 (unregistering): Port device team_slave_0 removed [ 1749.490883][T19873] chnl_net:caif_netlink_parms(): no params data found [ 1750.909372][T19793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1751.025109][T19793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1751.160510][T19793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1751.302121][T19793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1751.608858][T20023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1752.436672][T19873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.471872][T19873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.498984][T20033] loop0: detected capacity change from 0 to 256 [ 1752.530436][T19873] bridge_slave_0: entered allmulticast mode [ 1752.601031][T19873] bridge_slave_0: entered promiscuous mode [ 1752.612846][T20033] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1752.707734][T19873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.734954][T19873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.774695][T19873] bridge_slave_1: entered allmulticast mode [ 1752.817850][T19873] bridge_slave_1: entered promiscuous mode [ 1752.997711][T20033] loop0: detected capacity change from 256 to 0 [ 1753.328011][T20039] bridge0: port 3(syz_tun) entered blocking state [ 1753.335779][T20039] bridge0: port 3(syz_tun) entered disabled state [ 1753.359362][T20039] syz_tun: entered allmulticast mode [ 1753.396795][T20039] syz_tun: entered promiscuous mode [ 1753.444093][T20039] bridge0: port 3(syz_tun) entered blocking state [ 1753.451373][T20039] bridge0: port 3(syz_tun) entered forwarding state [ 1753.534632][T19873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.625670][T19873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.732092][T19249] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1754.202813][T19873] team0: Port device team_slave_0 added [ 1754.483124][ T8747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.563764][T19873] team0: Port device team_slave_1 added [ 1754.698830][ T8747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.137623][ T8747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.493472][ T8747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.526776][T19873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.549874][T19873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.604623][T19873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.708125][T19873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.715296][T19873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.790098][T19873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1756.413110][T19873] hsr_slave_0: entered promiscuous mode [ 1756.424771][T19873] hsr_slave_1: entered promiscuous mode [ 1756.458588][T19873] debugfs: 'hsr0' already exists in 'hsr' [ 1756.464734][T19873] Cannot create hsr debugfs directory [ 1756.565828][ T8747] bridge_slave_1: left allmulticast mode [ 1756.607607][ T8747] bridge_slave_1: left promiscuous mode [ 1756.614350][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.657744][ T8747] bridge_slave_0: left allmulticast mode [ 1756.663640][ T8747] bridge_slave_0: left promiscuous mode [ 1756.684549][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.914091][T15719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1757.933811][T15719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1757.954628][T15719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1757.976244][T18847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1757.990188][T18847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1758.031437][ T8747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.093974][ T8747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.143220][ T8747] bond0 (unregistering): Released all slaves [ 1758.465466][T19793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1758.962429][T20086] loop2: detected capacity change from 0 to 256 [ 1759.104312][T20086] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1759.295403][T20086] loop2: detected capacity change from 256 to 0 [ 1759.887914][T19585] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1760.094546][T19793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.117990][T18847] Bluetooth: hci3: command tx timeout [ 1760.281911][T20098] loop1: detected capacity change from 0 to 512 [ 1760.360064][T20098] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4269: inode has both inline data and extents flags [ 1760.362510][ T8747] hsr_slave_0: left promiscuous mode [ 1760.387743][T20098] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1760.390889][ T8747] hsr_slave_1: left promiscuous mode [ 1760.400274][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1760.400376][ C0] EXT4-fs (loop1): initial error at time 1771186496: ext4_orphan_get:1391: inode 15 [ 1760.400549][ C0] EXT4-fs (loop1): last error at time 1771186496: ext4_orphan_get:1391: inode 15 [ 1760.402765][T20098] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4269: couldn't read orphan inode 15 (err -117) [ 1760.402917][T20098] loop1: lost filesystem error report for type 5 error -117 [ 1760.453966][T20098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1760.465402][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1760.465509][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1760.524710][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1760.548898][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1760.668757][ T8747] veth1_macvtap: left promiscuous mode [ 1760.674648][ T8747] veth0_macvtap: left promiscuous mode [ 1760.711166][ T8747] veth1_vlan: left promiscuous mode [ 1760.716776][ T8747] veth0_vlan: left promiscuous mode [ 1762.197582][T18847] Bluetooth: hci3: command tx timeout [ 1762.510465][ T8747] team0 (unregistering): Port device team_slave_1 removed [ 1762.566112][ T8747] team0 (unregistering): Port device team_slave_0 removed [ 1763.283713][T15889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.291534][T15889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.790938][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.798551][ T8793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.080860][T18842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1764.090578][T18842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1764.108604][T18842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1764.163671][T18842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1764.185234][T18842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1764.278191][T18842] Bluetooth: hci3: command tx timeout [ 1764.521093][T19235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1764.812972][ T8747] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.352023][ T8747] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.586779][ T8747] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.710917][T20078] chnl_net:caif_netlink_parms(): no params data found [ 1766.003534][ T8747] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.297969][T18842] Bluetooth: hci1: command tx timeout [ 1766.357737][T18842] Bluetooth: hci3: command tx timeout [ 1766.945097][T20136] loop1: detected capacity change from 0 to 256 [ 1767.119051][T20136] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1767.363007][T19873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1767.621142][T19235] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 1767.659133][T19235] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 1767.668186][T19873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1767.920066][T19873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1768.025991][T19873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1768.317858][T20078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.325656][T20078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.359968][T18842] Bluetooth: hci1: command tx timeout [ 1768.388420][T20078] bridge_slave_0: entered allmulticast mode [ 1768.399081][T20078] bridge_slave_0: entered promiscuous mode [ 1768.600614][T20078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.616548][T20078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.632613][T20078] bridge_slave_1: entered allmulticast mode [ 1768.643393][T20078] bridge_slave_1: entered promiscuous mode [ 1768.732457][ T8747] bridge_slave_1: left allmulticast mode [ 1768.743827][ T8747] bridge_slave_1: left promiscuous mode [ 1768.752538][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.773129][ T8747] bridge_slave_0: left allmulticast mode [ 1768.779653][ T8747] bridge_slave_0: left promiscuous mode [ 1768.786515][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.410982][ T8747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.469365][ T8747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1769.495937][ T8747] bond0 (unregistering): Released all slaves [ 1770.099731][T20078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1770.204264][T20078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.447895][T18842] Bluetooth: hci1: command tx timeout [ 1770.931609][T20078] team0: Port device team_slave_0 added [ 1771.002623][T20078] team0: Port device team_slave_1 added [ 1771.112636][ T8747] hsr_slave_0: left promiscuous mode [ 1771.178698][ T8747] hsr_slave_1: left promiscuous mode [ 1771.186819][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.217475][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.242301][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1771.277706][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1771.342841][ T8747] veth1_macvtap: left promiscuous mode [ 1771.351732][ T8747] veth0_macvtap: left promiscuous mode [ 1771.359265][ T8747] veth1_vlan: left promiscuous mode [ 1771.364861][ T8747] veth0_vlan: left promiscuous mode [ 1771.436790][T20188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.547551][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1771.648963][T20191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.882299][T20193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.904113][T20193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1772.188914][ T8747] team0 (unregistering): Port device team_slave_1 removed [ 1772.226605][ T8747] team0 (unregistering): Port device team_slave_0 removed [ 1772.519277][T18842] Bluetooth: hci1: command tx timeout [ 1772.560140][T20111] chnl_net:caif_netlink_parms(): no params data found [ 1772.773916][T20078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.781396][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.866059][T20078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.017092][T20078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.024532][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1773.127566][T20078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1773.260790][T19793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.769090][T20078] hsr_slave_0: entered promiscuous mode [ 1773.803951][T20078] hsr_slave_1: entered promiscuous mode [ 1774.578254][T20212] batman_adv: batadv0: Adding interface: dummy0 [ 1774.584729][T20212] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1774.661481][T20212] batman_adv: batadv0: Interface activated: dummy0 [ 1774.774978][T20215] batadv0: mtu less than device minimum [ 1774.783929][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.797441][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.810738][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.824094][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.837822][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.851482][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.865015][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.878775][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.892223][T20215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1774.948556][T20111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.956329][T20111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.965298][T20111] bridge_slave_0: entered allmulticast mode [ 1774.976356][T20111] bridge_slave_0: entered promiscuous mode [ 1775.005331][T20111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.038550][T20111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.059049][T20111] bridge_slave_1: entered allmulticast mode [ 1775.090411][T20111] bridge_slave_1: entered promiscuous mode [ 1775.591905][T20111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.636463][T20111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.064731][T20229] loop1: detected capacity change from 0 to 256 [ 1776.074405][T19873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.159048][T20111] team0: Port device team_slave_0 added [ 1776.195435][T20229] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1776.315650][T20111] team0: Port device team_slave_1 added [ 1776.562445][T19235] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 1776.586172][T19235] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 1776.875773][T20111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.907488][T20111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.971250][T20111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.005352][T20111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.018237][T20111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.045754][T20111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.226760][T19873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.579623][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.587001][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.808678][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.816580][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.864257][T20111] hsr_slave_0: entered promiscuous mode [ 1777.889690][T20111] hsr_slave_1: entered promiscuous mode [ 1777.901785][T20111] debugfs: 'hsr0' already exists in 'hsr' [ 1777.908618][T20111] Cannot create hsr debugfs directory [ 1778.004535][T19793] veth0_vlan: entered promiscuous mode [ 1778.403109][T19793] veth1_vlan: entered promiscuous mode [ 1778.937553][ T795] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1779.139855][ T795] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1779.164284][ T795] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1779.187691][ T795] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1779.197168][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.259275][T20254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1779.330044][ T795] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1779.381858][T20078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1779.735053][T20078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1779.854866][ T795] usb 2-1: USB disconnect, device number 5 [ 1779.951091][T20078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1780.031663][T20078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1780.452648][T19793] veth0_macvtap: entered promiscuous mode [ 1780.574556][T19793] veth1_macvtap: entered promiscuous mode [ 1782.057064][T18847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1782.066788][T18847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1782.078706][T18847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1782.097131][T18847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1782.118900][T20111] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1782.188709][T18847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1782.245517][T20111] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1782.409971][T20111] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1782.561842][T20111] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1782.854358][T19873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1783.053075][T20078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.830487][T20078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.023483][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.031218][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.286659][T18847] Bluetooth: hci4: command tx timeout [ 1784.732099][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.739825][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1785.550895][T20291] loop1: detected capacity change from 0 to 32768 [ 1785.612785][T20291] btrfs: Deprecated parameter 'usebackuproot' [ 1785.659423][T20291] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1785.698528][T20291] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4291 (20291) [ 1785.843771][T20291] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1785.878690][T20291] BTRFS info (device loop1): using crc32c checksum algorithm [ 1786.074619][T20278] chnl_net:caif_netlink_parms(): no params data found [ 1786.221493][T20291] BTRFS info (device loop1): rebuilding free space tree [ 1786.345701][T20291] BTRFS info (device loop1): enabling ssd optimizations [ 1786.361154][T18847] Bluetooth: hci4: command tx timeout [ 1786.379336][T20291] BTRFS info (device loop1): disabling tree log [ 1786.409283][T20291] BTRFS info (device loop1): turning on flush-on-commit [ 1786.416756][T20291] BTRFS info (device loop1): enabling free space tree [ 1786.450782][T20291] BTRFS info (device loop1): force clearing of disk cache [ 1786.469230][T20291] BTRFS info (device loop1): trying to use backup root at mount time [ 1786.540079][T20291] BTRFS info (device loop1): force zlib compression, level 3 [ 1786.561315][T20291] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1786.715089][T15889] bridge_slave_1: left allmulticast mode [ 1786.762480][T15889] bridge_slave_1: left promiscuous mode [ 1786.773242][T15889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.825491][T15889] bridge_slave_0: left allmulticast mode [ 1786.861158][T15889] bridge_slave_0: left promiscuous mode [ 1786.869493][T15889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.768409][T15889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.819164][T15889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.859768][T15889] bond0 (unregistering): Released all slaves [ 1787.950090][T20111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.026591][T20332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.146435][T20333] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 1788.293738][T20336] syz_tun: left allmulticast mode [ 1788.317793][T20336] syz_tun: left promiscuous mode [ 1788.324129][T20336] bridge0: port 3(syz_tun) entered disabled state [ 1788.440625][T18847] Bluetooth: hci4: command tx timeout [ 1788.450857][T20336] batman_adv: batadv0: Interface deactivated: dummy0 [ 1788.478282][T20336] batman_adv: batadv0: Removing interface: dummy0 [ 1788.546987][T20336] bridge_slave_0: left allmulticast mode [ 1788.585360][T20336] bridge_slave_0: left promiscuous mode [ 1788.608791][T20336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.657142][T20336] bridge_slave_1: left allmulticast mode [ 1788.665105][T20336] bridge_slave_1: left promiscuous mode [ 1788.673961][T20336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.752288][T20336] bond0: (slave bond_slave_0): Releasing backup interface [ 1788.805799][T20336] bond0: (slave bond_slave_1): Releasing backup interface [ 1788.913130][T20336] team0: Port device team_slave_0 removed [ 1789.000531][T20336] team0: Port device team_slave_1 removed [ 1789.023074][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.034633][T20336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.100806][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1789.116847][T20336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.153104][T20336] net_ratelimit: 10 callbacks suppressed [ 1789.153186][T20336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1789.294600][T15889] hsr_slave_0: left promiscuous mode [ 1789.323019][T15889] hsr_slave_1: left promiscuous mode [ 1789.351769][T15889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.383012][T15889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.480695][T15889] veth1_macvtap: left promiscuous mode [ 1789.486466][T15889] veth0_macvtap: left promiscuous mode [ 1789.510992][T15889] veth1_vlan: left promiscuous mode [ 1789.516603][T15889] veth0_vlan: left promiscuous mode [ 1789.870198][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1790.275356][T15889] team0 (unregistering): Port device team_slave_1 removed [ 1790.346458][T15889] team0 (unregistering): Port device team_slave_0 removed [ 1790.519970][T18847] Bluetooth: hci4: command tx timeout [ 1790.774665][T19873] veth0_vlan: entered promiscuous mode [ 1790.982061][T20111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.134756][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.142425][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.204976][T19873] veth1_vlan: entered promiscuous mode [ 1791.307061][T20363] loop1: detected capacity change from 0 to 16 [ 1791.323167][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.330807][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.380068][T20363] erofs (device loop1): mounted with root inode @ nid 36. [ 1791.786455][T20278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.828728][T20278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.836539][T20278] bridge_slave_0: entered allmulticast mode [ 1791.931482][T20278] bridge_slave_0: entered promiscuous mode [ 1792.064460][T20278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.105011][T20278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.128006][T20278] bridge_slave_1: entered allmulticast mode [ 1792.168874][T20278] bridge_slave_1: entered promiscuous mode [ 1792.563918][T20278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.614120][T20278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.106222][T20278] team0: Port device team_slave_0 added [ 1793.179102][T18842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1793.188920][T18842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1793.199519][T18842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1793.212530][T20278] team0: Port device team_slave_1 added [ 1793.218605][T18842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1793.247357][T18842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1793.683089][T20278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.707978][T20278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.772300][T20278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.845474][T20278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.882293][T20278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.911437][T20278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1794.239133][T20078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.863905][T20278] hsr_slave_0: entered promiscuous mode [ 1794.906321][T20278] hsr_slave_1: entered promiscuous mode [ 1794.956066][T20278] debugfs: 'hsr0' already exists in 'hsr' [ 1794.988308][T20278] Cannot create hsr debugfs directory [ 1795.318602][T18847] Bluetooth: hci5: command tx timeout [ 1795.660000][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1795.686728][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1796.801398][T20415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1797.398336][T18847] Bluetooth: hci5: command tx timeout [ 1797.665381][T20419] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 1797.676018][T20419] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 1797.888780][T20078] veth0_vlan: entered promiscuous mode [ 1797.929138][T20111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.133286][ T56] bridge_slave_1: left allmulticast mode [ 1798.143977][ T56] bridge_slave_1: left promiscuous mode [ 1798.178554][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.283154][ T56] bridge_slave_0: left allmulticast mode [ 1798.297700][ T56] bridge_slave_0: left promiscuous mode [ 1798.304462][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.685705][T20440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1798.848511][T20440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1798.977763][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.996222][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.023472][ T56] bond0 (unregistering): Released all slaves [ 1799.148338][T20078] veth1_vlan: entered promiscuous mode [ 1799.203501][T20381] chnl_net:caif_netlink_parms(): no params data found [ 1799.387197][ T56] hsr_slave_0: left promiscuous mode [ 1799.415971][ T56] hsr_slave_1: left promiscuous mode [ 1799.425311][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1799.438959][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1799.463029][ T56] veth1_vlan: left promiscuous mode [ 1799.470036][ T56] veth0_vlan: left promiscuous mode [ 1799.479031][T18847] Bluetooth: hci5: command tx timeout [ 1799.949681][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1800.126341][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1800.166544][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1801.155536][T20278] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1801.232598][T20278] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1801.377548][T20278] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1801.454065][T20278] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1801.505038][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.517852][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.559490][T18847] Bluetooth: hci5: command tx timeout [ 1802.016110][T20078] veth0_macvtap: entered promiscuous mode [ 1802.045795][T20381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.068543][T20381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.088122][T20381] bridge_slave_0: entered allmulticast mode [ 1802.110178][T20381] bridge_slave_0: entered promiscuous mode [ 1802.173627][T20381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.181826][T20381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.214615][T20381] bridge_slave_1: entered allmulticast mode [ 1802.241054][T20381] bridge_slave_1: entered promiscuous mode [ 1802.534291][T20078] veth1_macvtap: entered promiscuous mode [ 1802.690191][T20381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1802.732009][T20473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1802.739721][T20473] IPv6: NLM_F_CREATE should be set when creating new route [ 1802.748449][T20381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1803.113859][T20381] team0: Port device team_slave_0 added [ 1803.188746][T20381] team0: Port device team_slave_1 added [ 1803.442932][T20078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1803.460870][T20478] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 1803.478076][T20478] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 1803.493172][T20381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1803.501973][T20381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1803.531735][T20381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1803.551161][T20478] ===================================================== [ 1803.558935][T20478] BUG: KMSAN: uninit-value in ieee80211_radiotap_iterator_next+0x11f8/0x1620 [ 1803.568247][T20478] ieee80211_radiotap_iterator_next+0x11f8/0x1620 [ 1803.574986][T20478] ieee80211_parse_tx_radiotap+0x4bb/0x2160 [ 1803.581415][T20478] ieee80211_monitor_start_xmit+0x125e/0x1750 [ 1803.587808][T20478] dev_hard_start_xmit+0x24e/0xad0 [ 1803.593364][T20478] sch_direct_xmit+0x3b2/0xcf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1803.598531][T20478] __qdisc_run+0x1919/0x2830 [ 1803.603361][T20478] __dev_queue_xmit+0x2be5/0x5a50 [ 1803.608702][T20478] packet_xmit+0x8f/0x710 [ 1803.613204][T20478] packet_sendmsg+0x91d9/0xa320 [ 1803.618447][T20478] __sys_sendto+0xa77/0xb90 [ 1803.623411][T20478] __ia32_sys_sendto+0x12f/0x200 [ 1803.628774][T20478] ia32_sys_call+0x372f/0x4360 [ 1803.633847][T20478] __do_fast_syscall_32+0x17f/0x3f0 [ 1803.639657][T20478] do_fast_syscall_32+0x37/0x80 [ 1803.644776][T20478] do_SYSENTER_32+0x1f/0x30 [ 1803.649611][T20478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1803.656253][T20478] [ 1803.658805][T20478] Uninit was stored to memory at: [ 1803.664138][T20478] ieee80211_radiotap_iterator_next+0x14c8/0x1620 [ 1803.670958][T20478] ieee80211_parse_tx_radiotap+0x4bb/0x2160 [ 1803.677082][T20478] ieee80211_monitor_start_xmit+0x125e/0x1750 [ 1803.683513][T20478] dev_hard_start_xmit+0x24e/0xad0 [ 1803.689021][T20478] sch_direct_xmit+0x3b2/0xcf0 [ 1803.694118][T20478] __qdisc_run+0x1919/0x2830 [ 1803.699514][T20478] __dev_queue_xmit+0x2be5/0x5a50 [ 1803.704842][T20478] packet_xmit+0x8f/0x710 [ 1803.709477][T20478] packet_sendmsg+0x91d9/0xa320 [ 1803.714672][T20478] __sys_sendto+0xa77/0xb90 [ 1803.719542][T20478] __ia32_sys_sendto+0x12f/0x200 [ 1803.724853][T20478] ia32_sys_call+0x372f/0x4360 [ 1803.729985][T20478] __do_fast_syscall_32+0x17f/0x3f0 [ 1803.735436][T20478] do_fast_syscall_32+0x37/0x80 [ 1803.740768][T20478] do_SYSENTER_32+0x1f/0x30 [ 1803.745497][T20478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1803.752230][T20478] [ 1803.754702][T20478] Local variable iterator created at: [ 1803.760444][T20478] ieee80211_parse_tx_radiotap+0xc4/0x2160 [ 1803.766626][T20478] ieee80211_monitor_start_xmit+0x125e/0x1750 [ 1803.773164][T20478] [ 1803.775664][T20478] CPU: 1 UID: 0 PID: 20478 Comm: syz.1.4310 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.786969][T20478] Tainted: [L]=SOFTLOCKUP [ 1803.791521][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1803.801884][T20478] ===================================================== [ 1803.809083][T20478] Disabling lock debugging due to kernel taint [ 1803.815376][T20478] Kernel panic - not syncing: kmsan.panic set ... [ 1803.821983][T20478] CPU: 1 UID: 0 PID: 20478 Comm: syz.1.4310 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1803.833172][T20478] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1803.838866][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1803.849105][T20478] Call Trace: [ 1803.852644][T20478] [ 1803.855714][T20478] __dump_stack+0x26/0x30 [ 1803.860284][T20478] dump_stack_lvl+0x50/0x1c0 [ 1803.865103][T20478] ? dump_stack+0x12/0x25 [ 1803.869760][T20478] dump_stack+0x1e/0x25 [ 1803.874140][T20478] vpanic+0x7b4/0x1430 [ 1803.878473][T20478] panic+0x15d/0x160 [ 1803.882729][T20478] kmsan_report+0x31a/0x320 [ 1803.887642][T20478] ? __msan_warning+0x1b/0x30 [ 1803.892907][T20478] ? ieee80211_radiotap_iterator_next+0x11f8/0x1620 [ 1803.899768][T20478] ? ieee80211_parse_tx_radiotap+0x4bb/0x2160 [ 1803.906083][T20478] ? ieee80211_monitor_start_xmit+0x125e/0x1750 [ 1803.912555][T20478] ? dev_hard_start_xmit+0x24e/0xad0 [ 1803.918123][T20478] ? sch_direct_xmit+0x3b2/0xcf0 [ 1803.923314][T20478] ? __qdisc_run+0x1919/0x2830 [ 1803.928399][T20478] ? __dev_queue_xmit+0x2be5/0x5a50 [ 1803.933916][T20478] ? packet_xmit+0x8f/0x710 [ 1803.938732][T20478] ? packet_sendmsg+0x91d9/0xa320 [ 1803.944012][T20478] ? __sys_sendto+0xa77/0xb90 [ 1803.948957][T20478] ? __ia32_sys_sendto+0x12f/0x200 [ 1803.954261][T20478] ? ia32_sys_call+0x372f/0x4360 [ 1803.959403][T20478] ? __do_fast_syscall_32+0x17f/0x3f0 [ 1803.965010][T20478] ? do_fast_syscall_32+0x37/0x80 [ 1803.970292][T20478] ? do_SYSENTER_32+0x1f/0x30 [ 1803.975188][T20478] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1803.982279][T20478] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1803.989044][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1803.994413][T20478] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1804.000528][T20478] ? filter_irq_stacks+0x49/0x190 [ 1804.006002][T20478] ? stack_depot_save_flags+0x35/0x790 [ 1804.011896][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.017267][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.022634][T20478] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1804.028722][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.034118][T20478] __msan_warning+0x1b/0x30 [ 1804.038853][T20478] ieee80211_radiotap_iterator_next+0x11f8/0x1620 [ 1804.045841][T20478] ieee80211_parse_tx_radiotap+0x4bb/0x2160 [ 1804.052077][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.057485][T20478] ieee80211_monitor_start_xmit+0x125e/0x1750 [ 1804.063839][T20478] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 1804.070497][T20478] dev_hard_start_xmit+0x24e/0xad0 [ 1804.075920][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.081299][T20478] sch_direct_xmit+0x3b2/0xcf0 [ 1804.086369][T20478] __qdisc_run+0x1919/0x2830 [ 1804.091312][T20478] __dev_queue_xmit+0x2be5/0x5a50 [ 1804.096626][T20478] ? packet_sendmsg+0x8b5a/0xa320 [ 1804.101927][T20478] ? __msan_warning+0x1b/0x30 [ 1804.106862][T20478] ? filter_irq_stacks+0x13f/0x190 [ 1804.112236][T20478] ? __dev_queue_xmit+0x280/0x5a50 [ 1804.117552][T20478] ? stack_depot_save_flags+0x35/0x790 [ 1804.123305][T20478] packet_xmit+0x8f/0x710 [ 1804.127865][T20478] ? packet_parse_headers+0x92b/0xa20 [ 1804.133542][T20478] packet_sendmsg+0x91d9/0xa320 [ 1804.138698][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.144084][T20478] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1804.150187][T20478] ? aa_label_sk_perm+0x759/0x810 [ 1804.155669][T20478] ? tomoyo_socket_sendmsg_permission+0x41/0x590 [ 1804.162360][T20478] ? stack_trace_save_user+0xf0/0x170 [ 1804.168014][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.173839][T20478] ? __pfx_packet_sendmsg+0x10/0x10 [ 1804.179295][T20478] __sys_sendto+0xa77/0xb90 [ 1804.184072][T20478] ? kmsan_get_metadata+0xf1/0x160 [ 1804.189432][T20478] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1804.195649][T20478] __ia32_sys_sendto+0x12f/0x200 [ 1804.200837][T20478] ia32_sys_call+0x372f/0x4360 [ 1804.205800][T20478] __do_fast_syscall_32+0x17f/0x3f0 [ 1804.211251][T20478] do_fast_syscall_32+0x37/0x80 [ 1804.216328][T20478] do_SYSENTER_32+0x1f/0x30 [ 1804.221065][T20478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1804.227675][T20478] RIP: 0023:0xf704ef6c [ 1804.231937][T20478] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1804.251764][T20478] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1804.260585][T20478] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000640 [ 1804.268918][T20478] RDX: 0000000000000030 RSI: 0000000004000000 RDI: 0000000080000380 [ 1804.277046][T20478] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1804.285356][T20478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1804.293494][T20478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1804.301778][T20478] [ 1804.305573][T20478] Kernel Offset: disabled [ 1804.309978][T20478] Rebooting in 86400 seconds..