last executing test programs: 22m28.984957427s ago: executing program 32 (id=446): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) 5m26.324057121s ago: executing program 33 (id=5204): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x4000200}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) 3m38.233343044s ago: executing program 34 (id=5430): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2m46.114813014s ago: executing program 2 (id=5603): r0 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffc, 0xb0a0, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x9c, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 2m45.697132924s ago: executing program 2 (id=5607): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m45.260911375s ago: executing program 2 (id=5610): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="49ec34ea77775317d368b76dbb816423f0f334fc6157ce03c0a9a2cc9d60659ddf73c5d037040f15ece99b6359e9aedb74786c7ac998242a6b6073", @ANYRES16=0x0, @ANYRES64], 0x1, 0x314, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) clock_settime(0xfffffffb, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x208) semop(r3, &(0x7f00000002c0), 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$IPC_RMID(r3, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc2a, &(0x7f0000001940)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab2cbd7000fd7fffff32040060bfbed1df", @ANYRES32=0x0, @ANYBLOB="0c0099000600000076000000"], 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x2000c800) 2m42.405890774s ago: executing program 35 (id=5613): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) 2m42.383774804s ago: executing program 2 (id=5616): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 2m41.813446388s ago: executing program 2 (id=5620): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000640)={0x11}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{0xfec00001, 0xdddd1000, 0xd, 0x5, 0x3, 0xe8, 0x9, 0xc3, 0x0, 0x4, 0x20, 0xe}, {0x50000, 0x0, 0xc, 0x4, 0x5, 0x30, 0x7, 0x3, 0x4, 0x9, 0x0, 0x80}, {0x50000, 0x7000, 0x3, 0xfd, 0x0, 0x11, 0x6, 0x7, 0x8, 0xe1, 0x7, 0x83}, {0x8000000, 0xeeef0000, 0x0, 0x4, 0x1, 0xb, 0x0, 0x4, 0x0, 0x19, 0x6, 0x40}, {0xdddd0000, 0x100000, 0xd, 0x0, 0x2, 0xd4, 0x2, 0x75, 0x0, 0x41, 0x7, 0x8a}, {0xf000, 0x2000, 0x9, 0x10, 0x6, 0xd5, 0x5, 0xf9, 0x6, 0x73, 0x9, 0x9}, {0x4000, 0xb000, 0xe, 0x9, 0x7, 0x9, 0x3, 0x4, 0x2, 0xeb, 0x3, 0xb}, {0x8000000, 0xffff1000, 0xe, 0x7, 0x2, 0x5, 0xf9, 0x7, 0x2, 0x0, 0x84, 0xd}, {0x7000, 0xff}, {0x80a0000, 0xfbf9}, 0x40050002, 0x0, 0xa000, 0x10026a, 0xc, 0x0, 0x1000, [0x1, 0x8, 0xfffffffffffffffb, 0x6]}) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0x70000, 0xfffffffffffffffd, 0xc, 0x2}) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000200)={0x40000, 0x0, {[0x10000, 0x1057, 0xf3606f4, 0xfffffffffffffffd, 0x101, 0x1, 0x7, 0x4]}}) 2m39.481925954s ago: executing program 2 (id=5625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2m38.464254199s ago: executing program 36 (id=5625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2m2.268858844s ago: executing program 6 (id=5755): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 2m2.00983228s ago: executing program 8 (id=5758): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_ep_read(r0, 0x0, 0x1e, &(0x7f0000000040)=""/30) r1 = socket$key(0xf, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0x20000000}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x40}}, 0x0) 2m1.644421019s ago: executing program 6 (id=5760): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m1.305134857s ago: executing program 6 (id=5762): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m59.935038651s ago: executing program 6 (id=5765): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1m59.14137547s ago: executing program 6 (id=5768): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1m58.786966438s ago: executing program 8 (id=5769): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000003c0)="97452a307eb495fe22", 0x9}, {&(0x7f00000000c0)="9e76", 0x2}, {&(0x7f0000000340)="680dfd1e7541f64a84", 0x9}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x38}, 0x2400c804) 1m58.455263237s ago: executing program 8 (id=5770): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m58.393575678s ago: executing program 6 (id=5771): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4000, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x1, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x3, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m57.425756871s ago: executing program 37 (id=5771): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4000, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x1, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x3, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m57.417648442s ago: executing program 5 (id=5774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) 1m57.416304871s ago: executing program 8 (id=5776): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1m56.861832585s ago: executing program 8 (id=5778): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000003c0)="97452a307eb495fe2236000000", 0xd}, {&(0x7f00000000c0)="9e76", 0x2}, {&(0x7f0000000340)="680dfd1e7541f64a84", 0x9}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x38}, 0x2400c804) 1m56.853256245s ago: executing program 5 (id=5779): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1m56.200886041s ago: executing program 5 (id=5781): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = fanotify_init(0x40, 0x40000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) getdents64(r2, 0x0, 0x0) 1m55.984290726s ago: executing program 8 (id=5783): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m54.908372432s ago: executing program 38 (id=5783): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m54.893031803s ago: executing program 5 (id=5785): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1m54.405614984s ago: executing program 5 (id=5787): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.694771221s ago: executing program 5 (id=5789): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 1m52.836843642s ago: executing program 39 (id=5789): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 1m52.832787472s ago: executing program 7 (id=5791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="280000000104010800000000000000008ab3bdef"], 0x28}}, 0x800) 1m52.545028519s ago: executing program 7 (id=5792): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, 0x0, &(0x7f0000000cc0)={'syz', 0x1}, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 1m52.241845867s ago: executing program 7 (id=5793): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80240, 0x1c) 1m51.68192933s ago: executing program 7 (id=5794): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1m51.107067434s ago: executing program 7 (id=5795): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16, @ANYRESDEC=0x0, @ANYRES32, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x315, &(0x7f0000000f00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) stat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) fstat(r0, &(0x7f0000005480)) getgid() ftruncate(r1, 0x8000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4ea1, @dev={0xac, 0x14, 0x14, 0xd}}}) 1m48.277919163s ago: executing program 7 (id=5796): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) getgroups(0x3, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) chown(&(0x7f00000000c0)='my_tracefs/events/task/task_rename/filter\x00', 0x0, r0) 1m47.617099628s ago: executing program 40 (id=5796): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) getgroups(0x3, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) chown(&(0x7f00000000c0)='my_tracefs/events/task/task_rename/filter\x00', 0x0, r0) 1m27.351942268s ago: executing program 9 (id=5773): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x20, 0x144, 0x0, 0x1, [@nested={0x1c, 0xf3, 0x0, 0x1, [@nested={0x15, 0x28, 0x0, 0x1, [@nested={0x10, 0xa, 0x0, 0x1, [@typed={0xa, 0x110, 0x0, 0x0, @str='{:\'@-\x00'}]}, @generic="91"]}]}]}]}, 0x34}}, 0x4000080) 1m26.917810939s ago: executing program 9 (id=5798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1m26.549728128s ago: executing program 9 (id=5799): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="49ec34ea77775317d368b76dbb816423f0f334fc6157ce03c0a9a2cc9d60659ddf73c5d037040f15ece99b6359e9aedb74786c7ac998242a6b6073", @ANYRES16=0x0, @ANYRES64], 0x1, 0x314, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) clock_settime(0xfffffffb, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x208) semop(r3, &(0x7f00000002c0), 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$IPC_RMID(r3, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc2a, &(0x7f0000001940)="$eJzs3V1sXOlZB/DnnWPHY29pvd0220K3jFTURi6J8tXEVVDldF1DUZqt6rhir+rxR9LROuPIdmi2QGVABYmbir1B3CCLsgKpF1yxXOLSRWqFkFDVi3KBZIl2tRdc+KISEmjX6My8Y48TJ5lN1rGz+f1Ws/8zZ54zeT8mZ46lvD4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER8/gsXT55KB90KAOBRujz5lZNnfP8DwBPlip//AQAAAAAAAAAAAADgsEtRxNFIMfTaZppuPW+rXmo0b96aGp/Y+7DBFCkqUbTqy0f11OkzZz9z7vxoJ+99/Lvto/HC5JWLtecXr99Yml9enp+rTTUbs4tz8z2/w8Mef7uR1gDUrr90c+7q1eXa6RNndr18a/iNgaeODl84f/zcaKd2anxiYrKrpq//gf/0O9xthceRKKIeKd4afjPVI6ISDz8W9/ns7LfBVidGWp2YGp9odWShUW+ulC+mSq6qRNS6DhrrjNEjmIuHMjYQq2XzywaPlN2bvFFfqs8szNe+XF9aaaw0Fpup0m5t2Z9aVGI0RaxFxMbAnW/XH0V8PFK8cnIzzURE0RmHT7cWBt+/PZV96GMPynbW+iPWKo/BnB1iA1HE5Ujxi9ePxWw5ZvkRn4z4UpmvRbxa5uciUvnBOBvx8z0+Rzye+qKIf4sUi2kzzbXOB53zyqWv1r7YvLrYVds5rzz23w+P0iE/N1WjiJnWGX8zPfjFDgAAAAAAAAAAAAAAAADvtsEo4ruR4o+f+93WuuJorUv/wIXR9734m91rxp+9z/uUtSciYrXS25rc/rx0OFXK//ahY/SkGkV8K6//+8ODbgwAAAAAAAAAAAAAAAAAAMATrYgXI8XXjh9La9F9T/FG81rtSn1moX1X2M69fzv3TN/a2tqqpXaO5ZzOuZpzLed6zo2cUcnH5xzLOZ1zNedazvWcGzmjyMfnHMs5nXM151rO9ZwbOaMvH59zLOd0ztW++O3W8fn5es6NnHFI7t0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBeUoki3o4U3/nGZooUEWMR09HO9YGDbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUKqmIk5EivUXq63na5WIKxHx9tbWVucREZtlPqyD7isAAAAAAAAAAAAAAAAAAAAcWqmIT0SKZ/53M9Ui4tbwGwNPHR2+cP74udEiikhlSXf9C5NXLtaeX7x+Y2l+eXl+rjbVbMwuzs33+sdVLzWaN29NjU/sS2fua3Cf2z9YfX7xxstLjWtfX9nz9aHqxZnllaX67N4vx2BUIqa794y0Gjw1PtFq9EKj3mwdmip3aWAlYqzXzgAAAAAAAAAAAAAAAAAAAHBoDKUivhApfvafZ1Nn3Xhfe83/L7WfFdu1r/7+zu8CWLgtO7p/f0Av26nXho60Ft7XpsYnJia7dvf131latimlIp6NFJ965SOt9fAphvZcG1/Wvb+su3421w3/Slm3uquqOjI1PlG7vNg8fnFhYXG2vlKfWZivTd6oz/b8iwMAAAAAAAAAAAAAAAAAAADgHoZSET+JFP/9d/+eOvedz+v/+9rPutb//0ZrCX1LNe3Oba21/e9vre1vb3/gwujQx5+72/79WP9ftimlIr4dKc785COt++l31v9P31Zb1v1ppHjzuY/lusqRsq7e6U77Ha82FuZPlrV/FSl+9a1ObbRqr+XaZ3ZqT5W1g5HiLzZ31349135op/Z0WXssUvzgv/au/fBO7Zmy9meR4h//ttapHSprfy/XHt2pPTG7uDB3v2Et5/97keJvLv9W6vT5rvPf9fsfVm/LbXfM+b233635H+7at5rn9U/y/NfvM//nIsX3qh/Lde2xn8mvP936/878fypS/Me/7q69mms/uFN7qtduHbRy/r8bKb7/lz/d7nOe/zyyOzPUPf+/3Lc7tz8lBzT/T3ftG87tmn2HY/EkWn75my/VFxbml2zYsGFje+Ogz0w8CuX3/59Fiv87WqTOdUz+/n9f+9nO9d//fGvn+//CbbntgL7/P9i170K+aunvi6iuXL/R/2xEdfnlbx5vXK9fm7823zx96uRnP3vu1MlT5/qPdC7udrZ6Hrv3gnL+fxQpfvz3P97+OWb39d/e1/9Dt+W2A5r/Z7r7tOu6pueheCKV8//XkeLpz/90++fNe13/d37+P/aJ3bn99++A5v9DXfuGc7sa73AsAAAAAAAAAAAAHidDqYg/jxS/80e/njpriHr5939zt+W2A/r3X0e79s09onUNPQ8yAMAhUl7/fThS/NPWD7fXcu++/otf69R2X//dzTu9//+RXhv6Dtb/96bvQQ8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9l6KIP4gUQ69tpvWB8nlb9VKjefPW1PjE3ocNpkhRiaJVXz6qp06fOfuZc+dHO3nv499tH40XJq9crD2/eP3G0vzy8vxcbarZmF2cm+/5HR72+NuNtAagdv2lm3NXry7XTp84s+vlW8NvDDx1dPjC+ePnRju1U+MTE5NdNX39D/yn3yHdZf+RKOKHkeKt4TfT9wciKvHwY3Hvz87gA/agZ4OtToy0OjE1PtHqyEKj3lwpX0yVXFWJqHUdNNYZo0cwFw9lLGK1bH7Z4JGye5M36kv1mYX52pfrSyuNlcZiM1XarS37U4tKjKaItYjYGLjz7fqjiG9HildObqZ/HogoOuPw6cuTXzl55v7tqexDH3tQtrPWH7FWeQzm7BAbiCL+IVL84vVj8YOBiL5oP+KTEV8q87WIV8v8XEQqPxhnI36+x+eIx1NfFHE2UiymzfT6QHk+6JxXLn219sXm1cWu2s55ZX+/H/bdvn8B7XLIz03VKOJHrTP+ZvoXf68BAAAAAAAAAAAAAAAADpEi1iLF144fS631wdtrihvNa7Ur9ZmF9rK+ztq/zprpra2trVpq51jO6ZyrOddyrufcyBmVfHzOsZzTOVdzruVcz7mRM4p8fM6xnNM5V3Ou5VzPuZEz+vLxOcdyTudczbmWcz3nRs44JGv3AAAAAAAAAAAAAAAAAACA95ZKFK27uH/nG5tpa6B9f+npaOe6+4G+5/1/AAAA//+LB3Va") close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r5, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10142, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab2cbd7000fd7fffff32040060bfbed1df", @ANYRES32=0x0, @ANYBLOB="0c0099000600000076000000"], 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x2000c800) 1m23.255981557s ago: executing program 9 (id=5800): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1m22.592919563s ago: executing program 9 (id=5801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000900)={{r3, &(0x7f0000000180)='squashfs\x00', 0x200000, &(0x7f00000001c0)={@_ha_fsid={[0x55c, 0x5]}, {0x5, 0xfba5}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000480)=0x8}, 0x1, &(0x7f0000000880)=[{0x2, 0x60, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000980)={0x5, 0x1, 0x1, 0xffffffffffffffff, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x16, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) dup(r5) 1m21.92198609s ago: executing program 9 (id=5802): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xcd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x20000000, 0x0, 0x0, 0x92c, 0x3, 0x1000000000007c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6ef, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff1e97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80003, 0x0, 0x9, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4000100000001]}) 1m21.241803786s ago: executing program 41 (id=5802): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xcd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x20000000, 0x0, 0x0, 0x92c, 0x3, 0x1000000000007c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6ef, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff1e97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80003, 0x0, 0x9, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4000100000001]}) 27.399538568s ago: executing program 1 (id=5893): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) mkdir(0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket(0x2, 0xa, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e27, @local}, 0x1d7, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 26.88312419s ago: executing program 1 (id=5896): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d4, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = timerfd_create(0x7, 0x80000) timerfd_gettime(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, 0x0, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000000440), 0x0, 0x0) 26.102888799s ago: executing program 1 (id=5900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 25.413993415s ago: executing program 1 (id=5902): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 24.965385776s ago: executing program 1 (id=5906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) 24.645962104s ago: executing program 3 (id=5908): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, 0x0) 23.090477971s ago: executing program 1 (id=5910): pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) fcntl$getflags(r0, 0x408) 23.026030453s ago: executing program 3 (id=5911): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 22.142443024s ago: executing program 42 (id=5910): pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) fcntl$getflags(r0, 0x408) 22.129845875s ago: executing program 3 (id=5913): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000040)=0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 21.578854498s ago: executing program 3 (id=5914): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f0000000e40)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 20.909918615s ago: executing program 3 (id=5915): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) mkdir(0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket(0x2, 0xa, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e27, @local}, 0x1d7, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 17.611123854s ago: executing program 3 (id=5918): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102376, 0x18fe8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r2, 0x0, 0xfffffffffffffda0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@private0}}}, &(0x7f00000000c0)=0xe8) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @remote}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2c0, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) 16.909185981s ago: executing program 43 (id=5918): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102376, 0x18fe8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r2, 0x0, 0xfffffffffffffda0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@private0}}}, &(0x7f00000000c0)=0xe8) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @remote}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2c0, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) 15.674996761s ago: executing program 4 (id=5923): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x3, 0x9, 0x80) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x28) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES64=r4, @ANYRES64=r4, @ANYBLOB, @ANYRES8=r5, @ANYRES64=r2, @ANYRES64=r3], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x13, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000280)='.\x00', 0x0, 0x70) fremovexattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5b6a45e824a40e7ed510f1782e"]) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}}], 0x2, 0xc8844) 13.714265228s ago: executing program 4 (id=5927): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close(0x3) socket$inet6(0xa, 0x1, 0x200556) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000280)) 13.446677195s ago: executing program 4 (id=5928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000480)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r7, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x4, 0xffffffffffffffff}) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f00000003c0)={{@_ha_fsid={[0x7, 0x8]}, {0xf, 0x6, 0xe, 0x400}}, {{[0x2, 0x7, 0xffff1c25, 0x4495]}, 0x0, 0x0, 0x6, 0x0, 0x0}}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pimreg\x00', 0x2}) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x7, r1}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.031390831s ago: executing program 4 (id=5929): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000340)={0x20, 0x32, 0xe3, {0xe3, 0x22, "feba2ed72e5441ce1300ef989ea62d56f28a5c986ae46442ee86d276438f7ca8ff14f6454fc282738ef83cde065a1edf9a3e809ad5133995c48c4f90b9020c600a69db0a78cf014c33a865ecb4cf69e3d80950339d90836df08e697094259d6f17085f95d35ba43da2e5dd60346036f48cbe1193c6918c0e69129ab6a9e1b2da8b49321d5d71414d51d27f89966d9e5714fa74cbeff2af796ec14b057f0368e38267709c3a454a349e09e6f37c13704e5f3ab3b344b44021edbbc2b8576f3f7ced5376e57544886611a846daee678aab3f5210faf2f1e0386443ed7334be05242c"}}, &(0x7f00000004c0)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "415f47db69cf7d6082d277ba88dc0132c3a86aa2047b42c81c2152bd9f611daf730ed49c37ac065e5c26"}}, &(0x7f0000000500)={0x0, 0x22, 0x18, {[@main=@item_012={0x2, 0x0, 0x8, "58c1"}, @main=@item_012={0x2, 0x0, 0xb, "f860"}, @local=@item_012={0x2, 0x2, 0x8, "c05a"}, @local=@item_4={0x3, 0x2, 0x3, "54ce3f54"}, @main=@item_012={0x1, 0x0, 0x9, "83"}, @global=@item_4={0x3, 0x1, 0x8, "147890ff"}, @main=@item_012={0x2, 0x0, 0x8, 'y='}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xd30}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x17, 0x15, "a779811c0f6e350d24b1d5f28046c7b9797dbac713"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x1, 0x41, "2564611263d138a5c92a32ccc696522ba5a3dbbac095b15078608b9d0e91499c9d1d83efc9c29a6f9adeefdaa952e289fd2f31dead0f55e8c4d9f620d3a36131bb"}, 0x0}) 8.512259124s ago: executing program 0 (id=5931): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x48850) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xffffffee, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x282f, 0x1000, 0x40000003, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x20000001, 0xffffffff}}], 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x40000000015, 0x5, 0x0) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000007880)=""/102400, 0x19000) 8.034780586s ago: executing program 0 (id=5932): socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x50000000, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fdda020010"], 0x50) 7.225113465s ago: executing program 0 (id=5933): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgget$private(0x0, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) 6.922240022s ago: executing program 0 (id=5935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 3.770003318s ago: executing program 0 (id=5936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) connect(r0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0xf, 0x8, "638b7aad30afe0b00b81b20bea7c85e1a36a5b0d89d1f92b394f0db74e97822938f2ba04df110f56b4189735cba59d559000bba5f6f51fdd89eb3031a4475e", 0x2}, 0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r1, 0xda90) accept$inet(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a8a81a0775"}]}, 0x28}}, 0x4040020) r4 = accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) iopl(0x3) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffd5e, 0x38}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 3.625188532s ago: executing program 4 (id=5937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40c140, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') pread64(r5, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x4, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x7fff, 0x7, 0xffffffff, 0x1ff, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x5, 0xffffffff, 0xfffffffa, 0x4, 0x6, 0xa2d8, 0x5, 0x1000, 0x8, 0x471, 0x7, 0x384, 0x8001, 0x4]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ptrace$peekuser(0x3, r6, 0x45d5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x442, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0)={r8, 0xc5}, &(0x7f0000000100)=0x8) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 190.524955ms ago: executing program 0 (id=5938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x8acb413f8a4c4d98}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000440), 0x0, 0x24004095, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 0s ago: executing program 4 (id=5939): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x140) fcntl$notify(r4, 0x402, 0x8000003d) r5 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000580)={0x7, 0x8}, 0x10) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) close(0x3) syz_clone(0x4080800, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), &(0x7f00000003c0)) kernel console output (not intermixed with test programs): has invalid maxpacket 1023, setting to 64 [ 1301.782232][T22175] ext4: Unknown parameter 'nouser_xattr' [ 1301.905207][ T9] usb 3-1: config 248 interface 115 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 1023 [ 1302.006287][ T9] usb 3-1: config 248 interface 241 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1302.120404][ T9] usb 3-1: config 248 interface 241 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 1302.264660][ T9] usb 3-1: config 248 interface 115 has no altsetting 0 [ 1302.358296][ T9] usb 3-1: config 248 interface 241 has no altsetting 0 [ 1302.432777][ T9] usb 3-1: string descriptor 0 read error: -71 [ 1302.478080][ T9] usb 3-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=5f.a1 [ 1302.562701][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.678407][ T9] usb 3-1: can't set config #248, error -71 [ 1302.736176][ T9] usb 3-1: USB disconnect, device number 3 [ 1303.372980][T22204] loop4: detected capacity change from 0 to 128 [ 1305.237919][T22214] loop1: detected capacity change from 0 to 512 [ 1305.337271][T22214] EXT4-fs: Ignoring removed nobh option [ 1305.507196][T22214] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1305.562378][T22214] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.5405: ea_inode file size=1535 entry size=6 [ 1305.683339][T22214] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.5405: corrupted inode contents [ 1305.779128][T22214] EXT4-fs (loop1): Remounting filesystem read-only [ 1305.838021][T22214] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -5) [ 1305.904091][T22214] EXT4-fs (loop1): 1 orphan inode deleted [ 1305.935187][T22214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1307.088127][ T28] audit: type=1326 audit(1785375685.594:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1307.135068][T22245] loop4: detected capacity change from 0 to 16 [ 1307.202886][T22245] erofs: (device loop4): mounted with root inode @ nid 36. [ 1307.219644][ T28] audit: type=1326 audit(1785375685.594:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1309.116274][ T28] audit: type=1326 audit(1785375685.634:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1309.332472][ T28] audit: type=1326 audit(1785375685.634:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1309.483823][ T28] audit: type=1326 audit(1785375685.634:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1309.636905][ T28] audit: type=1326 audit(1785375685.634:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1311.578013][ T28] audit: type=1326 audit(1785375685.634:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1311.715632][T22277] loop4: detected capacity change from 0 to 16 [ 1311.769116][T22277] erofs: (device loop4): mounted with root inode @ nid 36. [ 1311.909705][ T28] audit: type=1326 audit(1785375685.634:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1312.108000][ T28] audit: type=1326 audit(1785375685.634:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1312.147774][T21644] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1312.314995][ T28] audit: type=1326 audit(1785375685.634:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1312.477482][ T28] audit: type=1326 audit(1785375685.634:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fced9b9df99 code=0x7ffc0000 [ 1312.661428][ T28] audit: type=1326 audit(1785375685.634:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fced9b9dd02 code=0x7ffc0000 [ 1312.784514][ T28] audit: type=1326 audit(1785375685.634:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fced9b5e7ce code=0x7ffc0000 [ 1312.967245][ T28] audit: type=1326 audit(1785375685.634:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fced9b9ddc7 code=0x7ffc0000 [ 1313.066478][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.107089][ T28] audit: type=1326 audit(1785375685.634:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fced9b5e7ce code=0x7ffc0000 [ 1313.268114][ T28] audit: type=1326 audit(1785375685.634:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fced9b9dc2b code=0x7ffc0000 [ 1313.454041][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.469169][ T28] audit: type=1326 audit(1785375685.674:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fced9b5e7ce code=0x7ffc0000 [ 1313.565832][ T28] audit: type=1326 audit(1785375685.674:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22244 comm="syz.4.5414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fced9b5e7ce code=0x7ffc0000 [ 1313.756020][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.010238][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.516001][T19164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.869069][T22322] loop2: detected capacity change from 0 to 1024 [ 1317.211624][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 1317.211640][ T28] audit: type=1800 audit(1785375695.699:231): pid=22322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5438" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 1317.419974][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1317.435368][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1317.444695][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1317.458000][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1317.467353][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1317.475844][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1318.029819][T22342] loop5: detected capacity change from 0 to 512 [ 1318.174659][T22342] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.5443: missing EA_INODE flag [ 1318.211217][T22347] loop2: detected capacity change from 0 to 256 [ 1318.267365][T22342] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5443: error while reading EA inode 12 err=-117 [ 1318.389763][T22342] EXT4-fs (loop5): 1 orphan inode deleted [ 1318.441500][T22347] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1318.455668][T22342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.477576][T22350] loop1: detected capacity change from 0 to 512 [ 1318.533791][T22350] EXT4-fs: Ignoring removed nobh option [ 1318.653647][T22350] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1318.735761][T22350] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.5444: ea_inode file size=1535 entry size=6 [ 1318.865523][T22350] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.5444: corrupted inode contents [ 1318.884404][T21450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.033354][T22350] EXT4-fs (loop1): Remounting filesystem read-only [ 1319.039933][T22350] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -5) [ 1319.187649][T22350] EXT4-fs (loop1): 1 orphan inode deleted [ 1319.234716][T22350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1319.506093][T22361] loop2: detected capacity change from 0 to 2048 [ 1319.557033][ T5781] Bluetooth: hci1: command tx timeout [ 1319.651836][T22361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1320.209577][T22374] loop2: detected capacity change from 0 to 512 [ 1320.371021][T22374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1320.454352][T22374] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1320.606641][T22374] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 1320.778882][T20798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.952739][T22330] chnl_net:caif_netlink_parms(): no params data found [ 1321.097414][ T11] hsr_slave_0: left promiscuous mode [ 1321.112291][T22391] binder: 22390:22391 ioctl c0306201 0 returned -14 [ 1321.133154][ T11] hsr_slave_1: left promiscuous mode [ 1321.153562][T22391] binder: 22390:22391 unknown command 0 [ 1321.164668][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1321.180696][T22391] binder: 22390:22391 ioctl c0306201 200000000080 returned -22 [ 1321.189979][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.211715][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1321.243161][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.277755][ T11] bridge_slave_1: left allmulticast mode [ 1321.303859][ T11] bridge_slave_1: left promiscuous mode [ 1321.323553][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.377615][ T11] bridge_slave_0: left allmulticast mode [ 1321.407409][ T11] bridge_slave_0: left promiscuous mode [ 1321.431159][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.486343][T22396] loop2: detected capacity change from 0 to 256 [ 1321.639299][ T5781] Bluetooth: hci1: command tx timeout [ 1321.647643][ T28] audit: type=1800 audit(1785375700.147:232): pid=22396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5453" name="file0" dev="loop2" ino=1048665 res=0 errno=0 [ 1321.681231][ T11] veth1_macvtap: left promiscuous mode [ 1321.720177][ T11] veth0_macvtap: left promiscuous mode [ 1321.760377][ T11] veth1_vlan: left promiscuous mode [ 1321.805434][ T11] veth0_vlan: left promiscuous mode [ 1322.261085][T22404] loop2: detected capacity change from 0 to 1024 [ 1322.613984][T22410] Bluetooth: MGMT ver 1.22 [ 1323.594516][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1323.685292][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1323.725703][ T5781] Bluetooth: hci1: command tx timeout [ 1323.777901][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.796764][ T5781] Bluetooth: hci1: command tx timeout [ 1325.835753][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.055314][ T11] bond0 (unregistering): Released all slaves [ 1327.521358][T22330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.680232][T22330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.720725][T22330] bridge_slave_0: entered allmulticast mode [ 1327.766250][T22330] bridge_slave_0: entered promiscuous mode [ 1327.821198][T22330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.843306][T19164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.893758][T22330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.940302][T22330] bridge_slave_1: entered allmulticast mode [ 1327.994403][T22330] bridge_slave_1: entered promiscuous mode [ 1328.216009][T22330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.265641][T22447] loop1: detected capacity change from 0 to 2048 [ 1328.305368][T22330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.373397][T22447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.455132][T22447] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.574785][T22330] team0: Port device team_slave_0 added [ 1328.663174][T22330] team0: Port device team_slave_1 added [ 1328.726744][T19164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.785577][T22330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.877435][T22330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.100104][T22330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.200038][T22330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.241252][T22330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.415438][T22330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.736170][T22330] hsr_slave_0: entered promiscuous mode [ 1329.834400][T22330] hsr_slave_1: entered promiscuous mode [ 1329.876281][T22330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.914669][T22330] Cannot create hsr debugfs directory [ 1330.338914][T20971] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1330.595543][T20971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.672327][T20971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.718913][T20971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1330.796163][T22330] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1330.819325][T20971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1330.875940][T20971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.898143][T22330] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1330.950168][T20971] usb 2-1: config 0 descriptor?? [ 1330.980503][T22330] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1331.055996][T22330] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1331.339148][T22505] loop5: detected capacity change from 0 to 256 [ 1331.387543][T20971] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1331.437057][T22505] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1331.503019][T22509] loop2: detected capacity change from 0 to 128 [ 1331.581939][T20971] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1331.604672][T22330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.627649][T22509] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1331.750693][T22509] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1331.775293][T22330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.876264][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.883474][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.930275][T22509] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.045818][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.053132][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.148730][T22509] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1332.327838][ T28] audit: type=1800 audit(1785375710.822:233): pid=22509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5486" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 1332.548018][T22520] dummy_hcd dummy_hcd.0: remove, state 4 [ 1332.585906][T22520] usb usb1: USB disconnect, device number 1 [ 1332.638437][T20798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1332.839546][T20971] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 1332.870361][T22520] dummy_hcd dummy_hcd.0: stopped [ 1332.875387][T22520] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1333.567823][T22330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.824654][ T5819] usb 2-1: USB disconnect, device number 7 [ 1334.085347][T22552] loop5: detected capacity change from 0 to 256 [ 1334.222425][T22552] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1334.708916][T22568] loop2: detected capacity change from 0 to 512 [ 1334.812002][T22568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1334.869699][T22574] loop5: detected capacity change from 0 to 128 [ 1334.968835][T22568] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1335.159761][T22568] EXT4-fs (loop2): 1 truncate cleaned up [ 1335.196605][T22568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1335.217418][T22330] veth0_vlan: entered promiscuous mode [ 1335.326040][T22330] veth1_vlan: entered promiscuous mode [ 1335.440565][T22566] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.5498: Invalid inode table block 5 in block_group 0 [ 1335.544023][T22330] veth0_macvtap: entered promiscuous mode [ 1335.614419][T22566] EXT4-fs (loop2): Remounting filesystem read-only [ 1335.631849][T22330] veth1_macvtap: entered promiscuous mode [ 1335.802944][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.905576][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.978754][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.046377][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.094938][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.155561][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.210602][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.236902][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.264346][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.310317][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.359687][T20798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.386219][T22330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.461423][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.529597][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.565360][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.591069][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.616843][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.638134][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.649146][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.664303][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.676982][T22330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.690869][T22330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.712242][T22330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.824095][T22330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.944432][T22330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.992280][T22330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.062367][T22330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.610574][T20970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.661565][T20970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.692410][T22616] loop2: detected capacity change from 0 to 2048 [ 1337.746944][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.806693][T22616] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1337.818161][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.908524][T22616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1338.089479][ T28] audit: type=1800 audit(1785375716.579:234): pid=22616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5512" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 1339.074024][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1339.267443][T22648] loop1: detected capacity change from 0 to 4096 [ 1339.339349][ T9] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1339.373615][ T9] usb 3-1: config 0 has no interface number 0 [ 1339.415899][ T9] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1339.673347][ T9] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1339.969636][ T9] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1340.015969][ T9] usb 3-1: Manufacturer: syz [ 1341.742201][ T9] usb 3-1: SerialNumber: syz [ 1341.927762][ T9] usb 3-1: config 0 descriptor?? [ 1342.078390][ T9] usb 3-1: can't set config #0, error -71 [ 1342.125403][ T9] usb 3-1: USB disconnect, device number 4 [ 1342.554354][T22676] fuse: root generation should be zero [ 1343.101148][T22691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5533'. [ 1343.192966][T22694] loop6: detected capacity change from 0 to 1024 [ 1343.415563][ T28] audit: type=1800 audit(1785375721.876:235): pid=22694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5535" name="file0" dev="loop6" ino=18 res=0 errno=0 [ 1343.629762][T22701] loop5: detected capacity change from 0 to 256 [ 1343.735946][T22701] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1344.491094][T22720] loop1: detected capacity change from 0 to 4096 [ 1344.563409][T22720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.691696][ T28] audit: type=1800 audit(1785375723.175:236): pid=22720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5544" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 1345.134475][T22731] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5546'. [ 1345.337001][T19164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.477025][ T5822] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1345.600366][T22745] loop6: detected capacity change from 0 to 128 [ 1345.855420][ T5822] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1347.276391][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.400367][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.586054][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1347.695376][ T5822] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1348.642254][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.750623][ T5822] usb 3-1: config 0 descriptor?? [ 1349.798460][ T5822] usb 3-1: can't set config #0, error -71 [ 1349.883670][ T5822] usb 3-1: USB disconnect, device number 5 [ 1350.457916][T22774] loop6: detected capacity change from 0 to 512 [ 1350.572035][T22774] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1350.633324][T22774] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1350.777641][T22774] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.5558: bad orphan inode 131083 [ 1350.890784][T22774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.853353][T22330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.464498][T22814] loop2: detected capacity change from 0 to 128 [ 1353.563844][T22817] loop6: detected capacity change from 0 to 256 [ 1355.186061][T22820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5566'. [ 1355.195863][ T5781] Bluetooth: hci1: command tx timeout [ 1355.227023][T22817] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1355.781002][T22830] loop2: detected capacity change from 0 to 512 [ 1355.997301][T22830] EXT4-fs (loop2): 1 truncate cleaned up [ 1356.062911][T22830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.296258][T22845] loop6: detected capacity change from 0 to 1024 [ 1356.493287][T22845] hfsplus: b-tree write err: -5, ino 26 [ 1356.564711][T22849] loop5: detected capacity change from 0 to 128 [ 1356.629791][T20798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.289802][T22855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5579'. [ 1358.324727][T21253] hfsplus: b-tree write err: -5, ino 25 [ 1358.374644][T21253] hfsplus: b-tree write err: -5, ino 4 [ 1358.544620][T21253] hfsplus: b-tree write err: -5, ino 2 [ 1358.892336][T22863] loop6: detected capacity change from 0 to 1024 [ 1361.338198][T22884] 9pnet_fd: Insufficient options for proto=fd [ 1361.445013][ T28] audit: type=1326 audit(1785375739.917:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.5590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6fef9df99 code=0x0 [ 1361.473568][T22889] loop1: detected capacity change from 0 to 128 [ 1361.606218][T22889] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 1361.617611][T22891] loop2: detected capacity change from 0 to 512 [ 1361.738983][T21891] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1361.965205][T22891] EXT4-fs (loop2): 1 truncate cleaned up [ 1361.971812][T22891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.511459][T22902] loop5: detected capacity change from 0 to 1024 [ 1362.591099][T22902] EXT4-fs: Ignoring removed bh option [ 1362.780165][T22902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.873565][T20798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.910152][T22902] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.055674][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.062844][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.099952][T22915] loop6: detected capacity change from 0 to 512 [ 1363.151576][T22915] EXT4-fs: Ignoring removed nobh option [ 1363.187788][T22902] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.5594: Freeing blocks not in datazone - block = 0, count = 16 [ 1363.287876][T22915] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1363.363701][T22915] EXT4-fs warning (device loop6): ext4_xattr_inode_get:546: inode #11: comm syz.6.5598: ea_inode file size=1535 entry size=6 [ 1363.409130][T22922] loop1: detected capacity change from 0 to 128 [ 1363.421482][T22916] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.5594: bg 0: block 112: padding at end of block bitmap is not set [ 1363.480056][T22915] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1363.723197][T22915] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #15: comm syz.6.5598: corrupted inode contents [ 1365.155409][T22916] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 1365.171163][T22926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5600'. [ 1365.215045][T22915] EXT4-fs (loop6): Remounting filesystem read-only [ 1365.240101][T22916] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1365.240101][T22916] [ 1365.259500][T22915] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -5) [ 1365.312408][T22916] EXT4-fs (loop5): Total free blocks count 0 [ 1365.321017][T22915] EXT4-fs (loop6): 1 orphan inode deleted [ 1365.436133][T22916] EXT4-fs (loop5): Free/Dirty block details [ 1365.450550][T22915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1365.489530][T22916] EXT4-fs (loop5): free_blocks=0 [ 1365.494644][T22916] EXT4-fs (loop5): dirty_blocks=16 [ 1365.571241][T22916] EXT4-fs (loop5): Block reservation details [ 1365.633057][T22916] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1365.736429][ T28] audit: type=1326 audit(1785375744.205:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22932 comm="syz.1.5602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaddf9df99 code=0x0 [ 1365.930808][T21450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1366.079404][T22938] loop1: detected capacity change from 0 to 16 [ 1366.125385][T22330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.177264][T22938] erofs: (device loop1): mounted with root inode @ nid 36. [ 1366.448202][T19164] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 1366.961911][T22956] loop2: detected capacity change from 0 to 128 [ 1368.690400][T22958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5610'. [ 1368.900816][T20970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.970152][T20970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.305020][T20970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.376462][T20970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.663548][T20970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.731746][T22974] loop2: detected capacity change from 0 to 16 [ 1369.769063][T20970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.817065][T22974] erofs: (device loop2): mounted with root inode @ nid 36. [ 1370.129982][T20798] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1370.330761][T20970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1370.396407][T20970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.659863][T22988] loop5: detected capacity change from 0 to 128 [ 1372.337890][T22990] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1372.811403][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1372.824940][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1372.841155][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1372.850209][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1372.858154][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1372.865699][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1373.074789][T20970] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1373.130412][T20970] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.639171][T23025] loop5: detected capacity change from 0 to 128 [ 1374.942227][ T5792] Bluetooth: hci2: command tx timeout [ 1376.388428][T23030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5633'. [ 1376.605419][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1376.616689][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1376.629261][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1376.637496][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1376.645540][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1376.653218][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1377.024698][ T5781] Bluetooth: hci2: command tx timeout [ 1377.042268][T22995] chnl_net:caif_netlink_parms(): no params data found [ 1377.820705][T23060] loop5: detected capacity change from 0 to 128 [ 1379.486621][ T5781] Bluetooth: hci3: command tx timeout [ 1379.492883][ T5781] Bluetooth: hci2: command tx timeout [ 1379.530933][T23062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5642'. [ 1380.065711][T22995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.072863][T22995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.189330][T22995] bridge_slave_0: entered allmulticast mode [ 1380.237385][T22995] bridge_slave_0: entered promiscuous mode [ 1380.285536][T22995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.292715][T22995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.374609][T22995] bridge_slave_1: entered allmulticast mode [ 1380.421544][T22995] bridge_slave_1: entered promiscuous mode [ 1381.037747][T20970] hsr_slave_0: left promiscuous mode [ 1381.155486][T20970] hsr_slave_1: left promiscuous mode [ 1381.259187][T20970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.313314][T20970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.355017][T20970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.362505][T20970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.456610][T20970] bridge_slave_1: left allmulticast mode [ 1381.462300][T20970] bridge_slave_1: left promiscuous mode [ 1381.514382][ T5781] Bluetooth: hci2: command tx timeout [ 1381.519816][ T5781] Bluetooth: hci3: command tx timeout [ 1381.544658][T20970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.592808][T20970] bridge_slave_0: left allmulticast mode [ 1381.642082][T20970] bridge_slave_0: left promiscuous mode [ 1381.678221][T20970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.855179][T20970] veth1_macvtap: left promiscuous mode [ 1381.860940][T20970] veth0_macvtap: left promiscuous mode [ 1381.914750][T20970] veth1_vlan: left promiscuous mode [ 1381.920078][T20970] veth0_vlan: left promiscuous mode [ 1382.802381][T20970] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1382.830140][T20970] bond1 (unregistering): Released all slaves [ 1383.585804][ T5781] Bluetooth: hci3: command tx timeout [ 1384.478427][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1384.515336][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 1384.553000][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1384.577127][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1384.618521][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1384.643832][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1384.680269][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1384.711081][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1384.754528][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1384.771827][T23146] kvm: kvm [23145]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1385.515002][T20970] team0 (unregistering): Port device team_slave_1 removed [ 1385.676964][ T5781] Bluetooth: hci3: command tx timeout [ 1385.763242][T20970] team0 (unregistering): Port device team_slave_0 removed [ 1385.940504][T20970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.119877][T20970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.905779][T20970] bond0 (unregistering): Released all slaves [ 1387.121979][T22995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.285475][T22995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.464196][T22995] team0: Port device team_slave_0 added [ 1387.519284][T22995] team0: Port device team_slave_1 added [ 1387.697177][T22995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.746455][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.870784][T22995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.920067][T22995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.947445][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.076750][T22995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.121044][T23034] chnl_net:caif_netlink_parms(): no params data found [ 1388.467013][T20970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.572897][T22995] hsr_slave_0: entered promiscuous mode [ 1388.608747][T22995] hsr_slave_1: entered promiscuous mode [ 1388.636734][T22995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1388.666653][T22995] Cannot create hsr debugfs directory [ 1388.864477][T20970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.154457][T20970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.390635][T20970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.537450][T23034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.600067][T23034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.648782][T23034] bridge_slave_0: entered allmulticast mode [ 1389.679751][T23034] bridge_slave_0: entered promiscuous mode [ 1389.796289][T23034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.835225][T23034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.864622][T23034] bridge_slave_1: entered allmulticast mode [ 1389.886464][T23034] bridge_slave_1: entered promiscuous mode [ 1390.113727][T23034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.126763][T23034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.335296][T23034] team0: Port device team_slave_0 added [ 1390.694612][T23034] team0: Port device team_slave_1 added [ 1390.815204][T23223] kvm_pr_unimpl_wrmsr: 128 callbacks suppressed [ 1390.815309][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1390.895804][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 1390.971369][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1390.990172][T23034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.997158][T23034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.055309][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1391.117471][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1391.159120][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1391.200199][T23034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.263978][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1391.332940][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1391.391444][T23034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.398456][T23034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.430434][T23223] kvm: kvm [23222]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1391.606618][T23034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.181559][T22995] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1392.208859][T23034] hsr_slave_0: entered promiscuous mode [ 1392.223315][T23034] hsr_slave_1: entered promiscuous mode [ 1392.229598][T23034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1392.249480][T23034] Cannot create hsr debugfs directory [ 1392.299605][T22995] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1392.319211][T22995] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1392.379576][T22995] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1393.361832][T20970] hsr_slave_0: left promiscuous mode [ 1393.393557][T20970] hsr_slave_1: left promiscuous mode [ 1393.436456][T20970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.468344][T20970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.499697][T20970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.524472][T20970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.566249][T20970] bridge_slave_1: left allmulticast mode [ 1393.592844][T20970] bridge_slave_1: left promiscuous mode [ 1393.598611][T20970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.691362][T20970] bridge_slave_0: left allmulticast mode [ 1393.716087][T20970] bridge_slave_0: left promiscuous mode [ 1393.746521][T20970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.870734][T20970] veth1_macvtap: left promiscuous mode [ 1393.876307][T20970] veth0_macvtap: left promiscuous mode [ 1393.919192][T20970] veth1_vlan: left promiscuous mode [ 1393.936167][T23278] kvm: kvm [23276]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1393.949380][T20970] veth0_vlan: left promiscuous mode [ 1394.912950][T20970] bond1 (unregistering): Released all slaves [ 1396.113737][T20970] team0 (unregistering): Port device team_slave_1 removed [ 1396.196833][T20970] team0 (unregistering): Port device team_slave_0 removed [ 1396.268148][T20970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.357045][T20970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.960559][T20970] bond0 (unregistering): Released all slaves [ 1397.606771][T23034] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1397.657462][T23034] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1397.724570][T23034] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1397.775840][T23034] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1397.819804][T22995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.955411][T22995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.008127][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.015428][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.098893][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.106112][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.685784][T23034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.830065][T23315] kvm_pr_unimpl_wrmsr: 65 callbacks suppressed [ 1398.830078][T23315] kvm: kvm [23314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1398.915173][T23034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.940577][T23315] kvm: kvm [23314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 1399.034528][T23315] kvm: kvm [23314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1399.055361][T15954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.062540][T15954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.097650][T23315] kvm: kvm [23314]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1399.128811][T15954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.135998][T15954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.169910][T23315] kvm: kvm [23314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1399.215362][T23315] kvm: kvm [23314]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1399.329184][T23315] kvm: kvm [23314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 1399.468036][T23034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1399.555224][T22995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.719588][T23034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.280426][T22995] veth0_vlan: entered promiscuous mode [ 1401.373325][T22995] veth1_vlan: entered promiscuous mode [ 1401.606487][T22995] veth0_macvtap: entered promiscuous mode [ 1401.670093][T22995] veth1_macvtap: entered promiscuous mode [ 1401.764168][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.899141][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.960108][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.012557][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.057279][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.100041][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.133864][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.164443][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.194617][T22995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.295182][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.335760][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.380713][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.440013][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.487815][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.520352][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.552530][T22995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.598229][T22995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.629688][T22995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.729582][T22995] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.786385][T22995] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.816865][T22995] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.848824][T22995] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.081597][T23034] veth0_vlan: entered promiscuous mode [ 1403.223969][T23034] veth1_vlan: entered promiscuous mode [ 1403.256030][T15390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.323493][T15390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.384051][T23034] veth0_macvtap: entered promiscuous mode [ 1403.496830][T23034] veth1_macvtap: entered promiscuous mode [ 1403.620537][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.634905][T15390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.670493][T15390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.695870][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.720709][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.770138][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.794230][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.822633][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.854728][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.883120][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.906412][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.937960][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.994027][T23034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1404.084772][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.136766][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.204492][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.245752][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.282060][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.302795][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.335322][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.368377][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.390089][T23034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.421745][T23034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.457986][T23034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.552373][T23034] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.602534][T23034] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.665978][T23034] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.688220][T23422] loop7: detected capacity change from 0 to 512 [ 1404.695223][T23034] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.712802][T23422] EXT4-fs: Ignoring removed nobh option [ 1404.809065][T23422] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1404.849564][T23422] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.5614: ea_inode file size=1535 entry size=6 [ 1404.955657][T23422] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #15: comm syz.7.5614: corrupted inode contents [ 1405.034161][T23422] EXT4-fs (loop7): Remounting filesystem read-only [ 1405.106648][T23422] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -5) [ 1405.115884][T23422] EXT4-fs (loop7): 1 orphan inode deleted [ 1405.223103][T23422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1405.478593][T15954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.560860][T15954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.787936][T20970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.852262][T20970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.899603][T22995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.351969][T23474] loop5: detected capacity change from 0 to 512 [ 1407.418426][T23474] EXT4-fs: Ignoring removed nobh option [ 1407.493322][T23474] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1407.584033][T23474] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.5741: ea_inode file size=1535 entry size=6 [ 1407.732096][T23474] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.5741: corrupted inode contents [ 1407.816287][T23474] EXT4-fs (loop5): Remounting filesystem read-only [ 1407.865140][T23474] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -5) [ 1407.917194][T23474] EXT4-fs (loop5): 1 orphan inode deleted [ 1407.952236][T23474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1408.710502][T21450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.094068][T23492] loop7: detected capacity change from 0 to 128 [ 1409.240463][T21891] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1410.197676][T23517] loop5: detected capacity change from 0 to 4096 [ 1410.240429][T23517] EXT4-fs: Ignoring removed mblk_io_submit option [ 1410.349881][ T5819] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1410.357540][T23517] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1410.437810][T23517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.598045][ T5819] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1410.628446][ T5819] usb 9-1: config 0 has no interface number 0 [ 1410.706910][ T5819] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1410.779730][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.837081][ T5819] usb 9-1: Product: syz [ 1410.920460][T21450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.979882][ T5819] usb 9-1: Manufacturer: syz [ 1410.984625][ T5819] usb 9-1: SerialNumber: syz [ 1411.059069][T23535] loop6: detected capacity change from 0 to 4096 [ 1411.090213][ T5819] usb 9-1: config 0 descriptor?? [ 1411.262267][T23535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1412.031907][T22330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.437823][T23548] loop6: detected capacity change from 0 to 16 [ 1412.494025][T23548] erofs: (device loop6): mounted with root inode @ nid 36. [ 1412.813619][T22330] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 1413.131725][ T5819] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1413.208727][ T5819] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1413.289589][ T5819] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1413.366816][ T5819] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1413.428163][ T5819] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1413.548985][ T5819] usb 9-1: USB disconnect, device number 2 [ 1413.635933][ T5819] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1413.753792][ T5819] keyspan 9-1:0.133: device disconnected [ 1414.276429][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.495353][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.713687][T23577] loop8: detected capacity change from 0 to 16 [ 1414.770568][T23577] erofs: (device loop8): mounted with root inode @ nid 36. [ 1414.818571][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.064287][T23580] loop7: detected capacity change from 0 to 256 [ 1415.072527][T23034] erofs: (device loop8): erofs_fill_dentries: bogus dirent @ nid 36 [ 1415.403461][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.944565][T23588] loop5: detected capacity change from 0 to 256 [ 1416.299590][T23595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.312185][T23595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1416.321607][T23595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1416.341087][T23595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1416.348802][T23595] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1416.357322][T23595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1417.176873][T23606] loop5: detected capacity change from 0 to 16 [ 1417.256904][T23606] erofs: (device loop5): mounted with root inode @ nid 36. [ 1417.533493][T21450] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 1417.732657][T23615] loop7: detected capacity change from 0 to 512 [ 1417.793529][T23615] EXT4-fs: Ignoring removed nobh option [ 1417.861886][T23615] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1417.925680][T23615] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.5788: ea_inode file size=1535 entry size=6 [ 1418.016351][T23615] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #15: comm syz.7.5788: corrupted inode contents [ 1418.096958][T23615] EXT4-fs (loop7): Remounting filesystem read-only [ 1418.117143][T23615] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -5) [ 1418.162946][T23615] EXT4-fs (loop7): 1 orphan inode deleted [ 1418.169683][T23615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1418.469387][T22995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.485806][T23595] Bluetooth: hci1: command tx timeout [ 1418.549312][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1418.576507][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1418.593076][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1418.604417][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1418.612008][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1418.619757][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1419.217160][T23629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5791'. [ 1419.339410][T23594] chnl_net:caif_netlink_parms(): no params data found [ 1419.857059][T23637] loop7: detected capacity change from 0 to 128 [ 1419.924034][T23637] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1420.000164][T23637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1420.259063][ T34] hsr_slave_0: left promiscuous mode [ 1420.267841][ T34] hsr_slave_1: left promiscuous mode [ 1420.327894][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.379125][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.482747][T23647] loop7: detected capacity change from 0 to 16 [ 1420.504697][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.512133][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.552192][T23595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1420.570375][T23595] Bluetooth: hci1: command tx timeout [ 1420.588151][T23595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1420.597322][T23595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1420.605785][T23595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1420.613358][T23595] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1420.620813][T23595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1420.654198][T23647] erofs: (device loop7): mounted with root inode @ nid 36. [ 1420.675269][ T34] bridge_slave_1: left allmulticast mode [ 1420.681302][ T34] bridge_slave_1: left promiscuous mode [ 1420.726363][T23595] Bluetooth: hci0: command tx timeout [ 1420.763340][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.823051][ T34] bridge_slave_0: left allmulticast mode [ 1420.831104][T22995] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 36 [ 1420.850837][ T34] bridge_slave_0: left promiscuous mode [ 1420.869384][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.062451][ T34] veth1_macvtap: left promiscuous mode [ 1421.074666][ T34] veth0_macvtap: left promiscuous mode [ 1421.080322][ T34] veth1_vlan: left promiscuous mode [ 1421.104373][ T34] veth0_vlan: left promiscuous mode [ 1422.288402][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1422.377594][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1422.462819][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.545225][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.655920][T23595] Bluetooth: hci3: command tx timeout [ 1422.662191][T23595] Bluetooth: hci1: command tx timeout [ 1422.812700][T23595] Bluetooth: hci0: command tx timeout [ 1423.228596][ T34] bond0 (unregistering): Released all slaves [ 1423.506380][T23594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.513500][T23594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.563225][T23594] bridge_slave_0: entered allmulticast mode [ 1423.572741][T23594] bridge_slave_0: entered promiscuous mode [ 1423.636194][T23594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.643647][T23594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.677048][T23594] bridge_slave_1: entered allmulticast mode [ 1423.684248][T23594] bridge_slave_1: entered promiscuous mode [ 1423.930972][T23594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.968519][T23594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.191333][T23594] team0: Port device team_slave_0 added [ 1424.230306][T23621] chnl_net:caif_netlink_parms(): no params data found [ 1424.270732][T23594] team0: Port device team_slave_1 added [ 1424.420818][T23594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.446736][T23594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.497882][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.504491][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.545637][T23594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.626784][T23594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.634708][T23594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.720171][T23594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.735415][T23595] Bluetooth: hci1: command tx timeout [ 1424.745201][ T5781] Bluetooth: hci3: command tx timeout [ 1424.886518][T23595] Bluetooth: hci0: command tx timeout [ 1424.997637][T23621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.004858][T23621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.016464][T23621] bridge_slave_0: entered allmulticast mode [ 1425.023596][T23621] bridge_slave_0: entered promiscuous mode [ 1425.164974][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.175498][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.189763][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.200012][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.214310][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1425.223368][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.264641][ T3414] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.302030][T23594] hsr_slave_0: entered promiscuous mode [ 1425.309212][T23594] hsr_slave_1: entered promiscuous mode [ 1425.327447][T23594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1425.335065][T23594] Cannot create hsr debugfs directory [ 1425.353230][T23621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.362546][T23621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.377335][T23621] bridge_slave_1: entered allmulticast mode [ 1425.384548][T23621] bridge_slave_1: entered promiscuous mode [ 1425.474118][ T3414] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.542663][ T3414] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.639654][ T3414] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.778263][T23621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.797132][T23646] chnl_net:caif_netlink_parms(): no params data found [ 1425.833255][T23621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.012357][T23621] team0: Port device team_slave_0 added [ 1426.120744][T23621] team0: Port device team_slave_1 added [ 1426.358959][T23621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.365972][T23621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.400838][T23621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.431689][T23621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.443730][T23621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.479545][T23621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.532004][ T3414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.716562][ T3414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.754408][T23646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.769656][T23646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.784248][T23646] bridge_slave_0: entered allmulticast mode [ 1426.795802][T23646] bridge_slave_0: entered promiscuous mode [ 1426.807871][ T5781] Bluetooth: hci3: command tx timeout [ 1426.822703][T23646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.832578][T23646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.844570][T23646] bridge_slave_1: entered allmulticast mode [ 1426.856001][T23646] bridge_slave_1: entered promiscuous mode [ 1426.885558][T23663] chnl_net:caif_netlink_parms(): no params data found [ 1426.941097][ T3414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.967955][ T5781] Bluetooth: hci0: command tx timeout [ 1427.088008][ T3414] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.145573][T23621] hsr_slave_0: entered promiscuous mode [ 1427.162090][T23621] hsr_slave_1: entered promiscuous mode [ 1427.172290][T23621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.184642][T23621] Cannot create hsr debugfs directory [ 1427.219682][T23646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.288140][ T5781] Bluetooth: hci2: command tx timeout [ 1427.317115][T23646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.406122][T23594] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1427.516946][T23594] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1427.612335][T23646] team0: Port device team_slave_0 added [ 1427.646403][T23594] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1427.702883][T23646] team0: Port device team_slave_1 added [ 1427.740618][T23594] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1427.780898][T23663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.800960][T23663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.813979][T23663] bridge_slave_0: entered allmulticast mode [ 1427.825888][T23663] bridge_slave_0: entered promiscuous mode [ 1427.911187][ T3414] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.954314][T23663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.967097][T23663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.988229][T23663] bridge_slave_1: entered allmulticast mode [ 1427.995721][T23663] bridge_slave_1: entered promiscuous mode [ 1428.081941][ T3414] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.119879][T23646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.126870][T23646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.167241][T23646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.246404][ T3414] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.276498][T23646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.293311][T23646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.330827][T23646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.355593][T23663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.428878][ T3414] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.474861][T23663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.824211][T23646] hsr_slave_0: entered promiscuous mode [ 1428.847014][T23646] hsr_slave_1: entered promiscuous mode [ 1428.859441][T23646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1428.867027][T23646] Cannot create hsr debugfs directory [ 1428.886756][T23663] team0: Port device team_slave_0 added [ 1428.898201][ T5781] Bluetooth: hci3: command tx timeout [ 1428.996261][T23663] team0: Port device team_slave_1 added [ 1429.104951][T23663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.118515][T23663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.154367][T23663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.234559][T23663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.253275][T23663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.288669][T23663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.369692][ T5781] Bluetooth: hci2: command tx timeout [ 1429.398007][T23594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.096579][T23663] hsr_slave_0: entered promiscuous mode [ 1430.113197][T23663] hsr_slave_1: entered promiscuous mode [ 1430.124357][T23663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1430.134559][T23663] Cannot create hsr debugfs directory [ 1430.294469][T23594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.462794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.469988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.653004][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.660318][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.449600][ T5781] Bluetooth: hci2: command tx timeout [ 1432.876735][T23594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.229061][T23646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1433.421569][T23646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1433.471486][T23646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1433.507853][ T3414] hsr_slave_0: left promiscuous mode [ 1433.530825][ T5781] Bluetooth: hci2: command tx timeout [ 1433.537373][ T3414] hsr_slave_1: left promiscuous mode [ 1433.567447][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.587745][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.609505][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.631260][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.646080][ T3414] bridge_slave_1: left allmulticast mode [ 1433.652989][ T3414] bridge_slave_1: left promiscuous mode [ 1433.658714][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.674838][ T3414] bridge_slave_0: left allmulticast mode [ 1433.684882][ T3414] bridge_slave_0: left promiscuous mode [ 1433.695067][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.718099][ T3414] hsr_slave_0: left promiscuous mode [ 1433.727914][ T3414] hsr_slave_1: left promiscuous mode [ 1433.738873][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.754073][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.765081][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.777364][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.788440][ T3414] bridge_slave_1: left allmulticast mode [ 1433.799238][ T3414] bridge_slave_1: left promiscuous mode [ 1433.808465][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.827661][ T3414] bridge_slave_0: left allmulticast mode [ 1433.836191][ T3414] bridge_slave_0: left promiscuous mode [ 1433.846815][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.872841][ T3414] hsr_slave_0: left promiscuous mode [ 1433.878819][ T3414] hsr_slave_1: left promiscuous mode [ 1433.889778][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.901161][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.915935][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.925695][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.942847][ T3414] bridge_slave_1: left allmulticast mode [ 1433.948527][ T3414] bridge_slave_1: left promiscuous mode [ 1433.959942][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.977210][ T3414] bridge_slave_0: left allmulticast mode [ 1433.984520][ T3414] bridge_slave_0: left promiscuous mode [ 1433.990227][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.090177][ T3414] veth1_macvtap: left promiscuous mode [ 1434.101793][ T3414] veth0_macvtap: left promiscuous mode [ 1434.107550][ T3414] veth1_vlan: left promiscuous mode [ 1434.119159][ T3414] veth0_vlan: left promiscuous mode [ 1434.126962][ T3414] veth1_macvtap: left promiscuous mode [ 1434.139395][ T3414] veth0_macvtap: left promiscuous mode [ 1434.145187][ T3414] veth1_vlan: left promiscuous mode [ 1434.150492][ T3414] veth0_vlan: left promiscuous mode [ 1434.169049][ T3414] veth1_macvtap: left promiscuous mode [ 1434.179685][ T3414] veth0_macvtap: left promiscuous mode [ 1434.200249][ T3414] veth1_vlan: left promiscuous mode [ 1434.205748][ T3414] veth0_vlan: left promiscuous mode [ 1435.677068][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 1435.770019][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 1435.870584][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.962666][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.649404][ T3414] bond0 (unregistering): Released all slaves [ 1437.706532][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 1437.790399][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 1437.862388][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.951869][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.631152][ T3414] bond0 (unregistering): Released all slaves [ 1439.721384][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 1439.809728][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 1439.954334][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.121085][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.091883][ T3414] bond0 (unregistering): Released all slaves [ 1441.386616][T23646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1442.110348][T23594] veth0_vlan: entered promiscuous mode [ 1442.250150][T23594] veth1_vlan: entered promiscuous mode [ 1442.311530][T23646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.374121][T23646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.498094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.505353][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.550996][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.558192][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.594776][T23663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1442.627088][T23663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1442.730692][T23663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1442.799017][T23594] veth0_macvtap: entered promiscuous mode [ 1442.836455][T23594] veth1_macvtap: entered promiscuous mode [ 1442.878639][T23663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1443.067355][T23621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1443.104470][T23621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1443.168536][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.199965][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.225482][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.243440][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.263074][T23594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1443.286780][T23621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1443.351789][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.396096][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.429535][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.460249][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.481997][T23594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1443.508403][T23621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1443.570135][T23594] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.587847][T23594] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.603012][T23594] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.622095][T23594] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.644647][T23646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.870470][T23663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.972200][T23646] veth0_vlan: entered promiscuous mode [ 1443.988999][T23663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.007426][T20970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.015283][T20970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.058917][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.066103][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.090734][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.097963][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.141949][T23646] veth1_vlan: entered promiscuous mode [ 1444.250416][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.310988][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.343579][T23621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.450533][T23621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.477614][T23646] veth0_macvtap: entered promiscuous mode [ 1444.679395][T23646] veth1_macvtap: entered promiscuous mode [ 1444.724098][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.731364][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.811851][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.819116][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.885607][T23702] netlink: 'syz.9.5773': attribute type 10 has an invalid length. [ 1444.908127][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5773'. [ 1444.944894][T23621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1445.056931][T23621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1445.254018][T23646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1445.340606][T23646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.410531][T23646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1445.480696][T23646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.499336][T23716] loop9: detected capacity change from 0 to 128 [ 1445.531495][T23646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1445.754643][T23646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.793652][T23646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.206534][T23718] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5799'. [ 1448.252952][T23646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.316850][T23646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.377942][T23646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.414544][T23646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.458056][T23646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.501699][T23646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.533846][T23646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.583851][T23646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.704931][T23646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.738636][T23646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.747478][T23646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.812757][T23663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.877932][T23621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.946918][T23729] loop9: detected capacity change from 0 to 16 [ 1449.023978][T23729] erofs: (device loop9): mounted with root inode @ nid 36. [ 1449.343693][T23594] erofs: (device loop9): erofs_fill_dentries: bogus dirent @ nid 36 [ 1449.494883][T23621] veth0_vlan: entered promiscuous mode [ 1449.553426][ T3414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.615593][ T3414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.867824][T23621] veth1_vlan: entered promiscuous mode [ 1449.911633][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.960915][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.320859][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.526198][T23621] veth0_macvtap: entered promiscuous mode [ 1450.710378][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.823366][T23621] veth1_macvtap: entered promiscuous mode [ 1451.002250][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.205398][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.314359][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.354516][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.404798][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.452328][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.490044][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.535607][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.576263][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.625331][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.683678][T23621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.764996][T23595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1451.778974][T23595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1451.788589][T23595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1451.797121][T23595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1451.805947][T23595] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1451.814812][T23663] veth0_vlan: entered promiscuous mode [ 1451.822849][T23595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1451.884059][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.921739][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.953344][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.975458][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.003806][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.030392][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.061226][T23621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.089848][T23621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.125397][T23621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.315523][T23621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.356072][T23621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.400244][T23621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.409023][T23621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.473213][T23663] veth1_vlan: entered promiscuous mode [ 1452.488461][T23772] loop0: detected capacity change from 0 to 128 [ 1452.555707][T23772] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1452.651905][T23772] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1453.037720][T23663] veth0_macvtap: entered promiscuous mode [ 1453.086908][T23646] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1453.124226][T23663] veth1_macvtap: entered promiscuous mode [ 1453.171654][T15390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.179513][T15390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.767861][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.799060][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.824925][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.857466][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.873561][T23595] Bluetooth: hci1: command tx timeout [ 1453.898552][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.922996][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.956226][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.985539][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.017316][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.056596][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.087322][T23663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1454.134937][T15954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.167250][T15954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.355376][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.387221][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.436901][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.467494][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.494765][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.526773][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.556711][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.595536][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.625632][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.657082][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.688919][T23663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.948914][T23663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.014867][T23663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.039734][T23663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.080298][T23663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.944356][T23595] Bluetooth: hci1: command tx timeout [ 1456.169718][T23763] chnl_net:caif_netlink_parms(): no params data found [ 1456.791461][T23827] kvm: kvm [23826]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1456.865461][ T12] hsr_slave_0: left promiscuous mode [ 1456.899241][ T12] hsr_slave_1: left promiscuous mode [ 1456.983314][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.020718][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.078149][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.106248][T23838] loop0: detected capacity change from 0 to 1024 [ 1457.123601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.198458][ T12] bridge_slave_1: left allmulticast mode [ 1457.238925][ T12] bridge_slave_1: left promiscuous mode [ 1457.267444][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.358501][ T12] bridge_slave_0: left allmulticast mode [ 1457.395009][ T12] bridge_slave_0: left promiscuous mode [ 1457.400807][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.437791][T23841] hfsplus: invalid extended attribute record [ 1457.665312][ T12] veth1_macvtap: left promiscuous mode [ 1457.670895][ T12] veth0_macvtap: left promiscuous mode [ 1457.696720][ T12] veth1_vlan: left promiscuous mode [ 1457.702087][ T12] veth0_vlan: left promiscuous mode [ 1457.716651][T15954] hfsplus: b-tree write err: -5, ino 8 [ 1457.735203][T23843] loop3: detected capacity change from 0 to 512 [ 1457.792875][T23843] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1457.799701][T23843] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1457.959428][T23843] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.5813: bad orphan inode 131083 [ 1458.016221][T23845] loop0: detected capacity change from 0 to 2048 [ 1458.027524][T23595] Bluetooth: hci1: command tx timeout [ 1458.035487][T23843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1458.100743][T23845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1458.927019][T23621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.010473][T23646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.111072][T23595] Bluetooth: hci1: command tx timeout [ 1460.577296][T23866] loop3: detected capacity change from 0 to 512 [ 1460.634296][T23866] EXT4-fs: Ignoring removed nobh option [ 1460.683056][T23866] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1460.740803][T23866] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.5818: ea_inode file size=1535 entry size=6 [ 1460.835276][T23866] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.5818: corrupted inode contents [ 1460.929429][T23866] EXT4-fs (loop3): Remounting filesystem read-only [ 1460.963294][T23866] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -5) [ 1461.009556][T23866] EXT4-fs (loop3): 1 orphan inode deleted [ 1461.035699][T23866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1463.798349][T23621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.859180][T23880] loop3: detected capacity change from 0 to 128 [ 1464.958586][T23882] loop0: detected capacity change from 0 to 128 [ 1464.972662][T23880] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1465.001156][T23882] EXT4-fs (loop0): filesystem is read-only [ 1465.063098][T23882] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 1465.242263][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1465.264095][T23880] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1465.375655][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1465.585191][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.180893][T23646] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1468.207583][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.663346][T23891] loop3: detected capacity change from 0 to 4096 [ 1469.664880][T23895] loop0: detected capacity change from 0 to 2048 [ 1469.729720][T23895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1473.125705][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1473.298366][ T12] bond0 (unregistering): Released all slaves [ 1473.547538][T15954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.593557][T15954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.627147][T23763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.647886][T23763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.669375][T23763] bridge_slave_0: entered allmulticast mode [ 1473.692737][T23763] bridge_slave_0: entered promiscuous mode [ 1473.739455][T23763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.786937][T23763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.836403][T23763] bridge_slave_1: entered allmulticast mode [ 1473.919860][T23763] bridge_slave_1: entered promiscuous mode [ 1474.524492][T23763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.582020][T23763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.812579][T23763] team0: Port device team_slave_0 added [ 1474.942553][T15954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.007571][T15954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.020924][T23763] team0: Port device team_slave_1 added [ 1477.656640][T23763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.802567][T23763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.938678][T23933] loop4: detected capacity change from 0 to 512 [ 1477.983204][T23763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.000540][T23933] EXT4-fs: Ignoring removed nobh option [ 1478.076496][T23763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.099355][T23933] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1478.135841][T23763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.181322][T23933] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.5797: ea_inode file size=1535 entry size=6 [ 1478.267526][T23933] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.5797: corrupted inode contents [ 1478.322827][T23763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.366006][T23933] EXT4-fs (loop4): Remounting filesystem read-only [ 1478.423392][T23933] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -5) [ 1478.432463][T23933] EXT4-fs (loop4): 1 orphan inode deleted [ 1478.501007][T23933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1480.196902][T23763] hsr_slave_0: entered promiscuous mode [ 1481.122108][T23763] hsr_slave_1: entered promiscuous mode [ 1481.179393][T23763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1481.323626][T23763] Cannot create hsr debugfs directory [ 1481.335557][T23663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.119987][T23977] loop4: detected capacity change from 0 to 512 [ 1483.181055][T23977] EXT4-fs: Ignoring removed nobh option [ 1483.207822][T23980] loop3: detected capacity change from 0 to 256 [ 1483.292673][T23977] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1483.357420][T23977] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.5847: ea_inode file size=1535 entry size=6 [ 1483.382248][T23980] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1483.477737][T23977] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.5847: corrupted inode contents [ 1483.611896][T23977] EXT4-fs (loop4): Remounting filesystem read-only [ 1483.683257][T23977] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -5) [ 1483.774242][T23977] EXT4-fs (loop4): 1 orphan inode deleted [ 1483.796120][T23977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1484.129770][T23663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.653279][T23763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1484.719317][T23763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1484.813712][T23763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1484.887751][T23763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1485.320788][T24015] loop4: detected capacity change from 0 to 512 [ 1485.389707][T24015] EXT4-fs: Ignoring removed nobh option [ 1485.443820][T23763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.481904][T24015] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1485.564286][T24015] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.5857: ea_inode file size=1535 entry size=6 [ 1485.610385][T23763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.076978][T24023] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[23646] was attempted by " [ 1486.078315][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.182780][T24015] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.5857: corrupted inode contents [ 1486.224662][T20970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.231919][T20970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.254262][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.294048][T24015] EXT4-fs (loop4): Remounting filesystem read-only [ 1486.327317][T24015] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -5) [ 1486.363707][T20970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.370965][T20970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.391967][T24015] EXT4-fs (loop4): 1 orphan inode deleted [ 1486.529826][T24015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1486.845895][T23663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1493.278605][T23763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.418343][T24065] loop3: detected capacity change from 0 to 128 [ 1493.518751][T23763] veth0_vlan: entered promiscuous mode [ 1493.579715][T24068] »»»»»»: renamed from vlan0 (while UP) [ 1496.131043][T23763] veth1_vlan: entered promiscuous mode [ 1496.165875][T24072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1496.492252][T23763] veth0_macvtap: entered promiscuous mode [ 1496.550985][T23763] veth1_macvtap: entered promiscuous mode [ 1496.648300][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.801646][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.852657][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.901917][T24090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5874'. [ 1496.926464][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.955003][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.018848][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.087492][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.138631][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.197638][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.258101][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.314096][T23763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.416906][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.462429][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.526945][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.589454][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.636538][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.673294][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.711471][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.761339][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.795603][T23763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.830280][T23763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.875706][T23763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.962435][T23763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.016073][T23763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.059082][T23763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.131832][T23763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.969183][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.033939][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.709018][T24120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5880'. [ 1501.787511][T20970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.851005][T20970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.633454][T24136] loop1: detected capacity change from 0 to 2048 [ 1502.686253][T24136] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1502.808914][T24136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1502.964425][ T28] audit: type=1800 audit(1785375881.366:239): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5803" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 1503.924214][T24161] xt_hashlimit: size too large, truncated to 1048576 [ 1506.628814][T24205] loop1: detected capacity change from 0 to 16 [ 1506.688084][T24205] erofs: (device loop1): mounted with root inode @ nid 36. [ 1506.965150][T23763] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 1509.212903][T20970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.757380][T20970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.122882][T20970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.575885][T20970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.641273][T24242] loop3: detected capacity change from 0 to 16 [ 1510.715216][T24242] erofs: (device loop3): mounted with root inode @ nid 36. [ 1511.020424][T23621] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1511.421411][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1511.435763][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1511.444934][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1511.453127][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1511.463543][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1511.474603][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1513.570534][ T5781] Bluetooth: hci1: command tx timeout [ 1514.719975][T24269] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 1514.746699][T24269] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 1515.605480][T24284] trusted_key: encrypted_key: hex blob is missing [ 1515.651495][ T5781] Bluetooth: hci1: command tx timeout [ 1515.749269][T24247] chnl_net:caif_netlink_parms(): no params data found [ 1516.373389][T23595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1516.386277][T23595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1516.394702][T23595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1516.404683][T23595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1516.416942][T23595] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1516.425108][T23595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1516.584713][T24247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.630614][T24247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.671127][T24247] bridge_slave_0: entered allmulticast mode [ 1516.718121][T24247] bridge_slave_0: entered promiscuous mode [ 1516.750019][T24247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.808644][T24247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.828599][T24247] bridge_slave_1: entered allmulticast mode [ 1516.860900][T24247] bridge_slave_1: entered promiscuous mode [ 1517.297338][T24247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.450958][T24247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.558857][T20970] hsr_slave_0: left promiscuous mode [ 1517.585291][T20970] hsr_slave_1: left promiscuous mode [ 1517.615809][T20970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.656945][T23597] IPVS: starting estimator thread 0... [ 1517.663932][T20970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.673961][T24299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1517.722867][T20970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.741327][T23595] Bluetooth: hci1: command tx timeout [ 1517.763371][T20970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.794183][T24317] IPVS: using max 26 ests per chain, 62400 per kthread [ 1517.807479][T20970] bridge_slave_1: left allmulticast mode [ 1517.815393][T24318] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1517.833208][T20970] bridge_slave_1: left promiscuous mode [ 1517.856888][T20970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.926923][T20970] bridge_slave_0: left allmulticast mode [ 1517.948602][T20970] bridge_slave_0: left promiscuous mode [ 1517.988350][T20970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.119934][T20970] veth1_macvtap: left promiscuous mode [ 1518.142238][T20970] veth0_macvtap: left promiscuous mode [ 1518.168148][T20970] veth1_vlan: left promiscuous mode [ 1518.193269][T20970] veth0_vlan: left promiscuous mode [ 1518.453480][T23595] Bluetooth: hci0: command tx timeout [ 1519.853750][T23595] Bluetooth: hci1: command tx timeout [ 1520.544131][T23595] Bluetooth: hci0: command tx timeout [ 1521.673462][T20970] team0 (unregistering): Port device team_slave_1 removed [ 1521.753844][T20970] team0 (unregistering): Port device team_slave_0 removed [ 1521.839521][T20970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.921249][T20970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.543482][T20970] bond0 (unregistering): Released all slaves [ 1522.616456][T23595] Bluetooth: hci0: command tx timeout [ 1522.723896][T24333] netlink: 'syz.0.5934': attribute type 4 has an invalid length. [ 1522.792083][T24337] netlink: 'syz.0.5934': attribute type 4 has an invalid length. [ 1522.952877][T24247] team0: Port device team_slave_0 added [ 1523.017231][T24247] team0: Port device team_slave_1 added [ 1523.268359][T24247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.309629][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.456140][T24247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.510822][T24247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.556737][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.685555][T24247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.170758][T24247] hsr_slave_0: entered promiscuous mode [ 1524.219853][T24247] hsr_slave_1: entered promiscuous mode [ 1524.283442][T24247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1524.343915][T24247] Cannot create hsr debugfs directory [ 1524.473731][T24293] chnl_net:caif_netlink_parms(): no params data found [ 1524.695980][T23595] Bluetooth: hci0: command tx timeout [ 1525.321415][T20970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.516746][ T5822] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1525.559429][T20970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.659959][T24293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.692983][T24293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.718608][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1525.740568][T24293] bridge_slave_0: entered allmulticast mode [ 1525.765910][ T5822] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1525.788777][T24293] bridge_slave_0: entered promiscuous mode [ 1525.821534][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.878923][ T5822] usb 5-1: config 0 descriptor?? [ 1525.886888][T24392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1525.949397][T20970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.030948][T24293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.051038][T24401] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[23646] was attempted by ""[24401] [ 1526.081923][T24293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.109132][T24293] bridge_slave_1: entered allmulticast mode [ 1526.148087][T24293] bridge_slave_1: entered promiscuous mode [ 1526.398441][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.450491][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.491275][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.541857][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.594568][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.624316][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.649153][T20970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.666957][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.696785][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.737316][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.769009][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.780041][T24293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.810924][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.870031][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.902765][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.948669][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1526.995979][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.046150][T24293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.055971][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.095123][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.129725][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.173390][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.233970][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.268096][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.317576][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.359902][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.406070][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.444262][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.478318][T24293] team0: Port device team_slave_0 added [ 1527.495543][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.540848][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.581850][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.617525][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.654614][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.703168][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.749707][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.773623][T24293] team0: Port device team_slave_1 added [ 1527.797996][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.835589][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.874925][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.920309][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1527.979823][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.020558][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.080570][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.130023][T24293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.137126][T24293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.185268][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.242226][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.277605][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.327072][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.379135][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.385979][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.398504][T24293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.459637][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1528.489512][T24293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.520760][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1529.060914][T24293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.189371][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1530.196297][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1530.723447][T24419] trusted_key: syz.0.5936 sent an empty control message without MSG_MORE. [ 1531.434740][T24427] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 1531.462678][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.485118][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.497789][T24293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.540415][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.593978][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.665018][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.679907][T24423] netlink: 'syz.4.5937': attribute type 3 has an invalid length. [ 1531.701862][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.766817][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.809776][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.816624][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.920364][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1531.927243][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.020685][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.053826][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.167246][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.195615][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.238962][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.257427][T24293] hsr_slave_0: entered promiscuous mode [ 1532.269492][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.287772][T24293] hsr_slave_1: entered promiscuous mode [ 1532.302134][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.315792][T24293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.326626][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.337134][T24293] Cannot create hsr debugfs directory [ 1532.345513][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.369420][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.394003][ T5822] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 1532.406688][T24434] BUG: unable to handle page fault for address: fffffffffffffbc8 [ 1532.414486][T24434] #PF: supervisor read access in kernel mode [ 1532.420479][T24434] #PF: error_code(0x0000) - not-present page [ 1532.426478][T24434] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 1532.432484][T24434] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1532.437811][T24434] CPU: 0 PID: 24434 Comm: syz.0.5938 Not tainted syzkaller #0 [ 1532.445288][T24434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1532.455371][T24434] RIP: 0010:strlen+0x39/0x70 [ 1532.460024][T24434] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 1532.479646][T24434] RSP: 0018:ffffc900031a6bd8 EFLAGS: 00010286 [ 1532.485724][T24434] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 1532.493705][T24434] RDX: ffffc9000dcdf000 RSI: 0000000000001ab5 RDI: fffffffffffffbc8 [ 1532.501678][T24434] RBP: ffffc900031a6d08 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 1532.509713][T24434] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 1532.517693][T24434] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 1532.525858][T24434] FS: 00007f2a9c7ec6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1532.534808][T24434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1532.541411][T24434] CR2: fffffffffffffbc8 CR3: 0000000069f71000 CR4: 00000000003506f0 [ 1532.549403][T24434] Call Trace: [ 1532.552707][T24434] [ 1532.555649][T24434] trace_event_raw_event_drv_net_setup_tc+0x109/0x4d0 [ 1532.562539][T24434] ? perf_trace_drv_twt_teardown_request+0x480/0x480 [ 1532.569245][T24434] ieee80211_netdev_setup_tc+0x2c2/0x320 [ 1532.575385][T24434] tcf_block_offload_cmd+0x235/0x3a0 [ 1532.580749][T24434] ? net_generic+0x240/0x240 [ 1532.585347][T24434] ? down_read_killable+0x340/0x340 [ 1532.590564][T24434] tcf_block_get_ext+0xdf2/0x13d0 [ 1532.595657][T24434] tcf_block_get+0x68/0xa0 [ 1532.600100][T24434] ? tcf_block_get+0xa0/0xa0 [ 1532.604706][T24434] fq_codel_init+0x39f/0x980 [ 1532.609303][T24434] ? fq_codel_peek+0x330/0x330 [ 1532.614071][T24434] qdisc_create+0x90f/0x1060 [ 1532.618694][T24434] ? qdisc_notify+0x370/0x370 [ 1532.623386][T24434] ? lockdep_rtnl_is_held+0x26/0x30 [ 1532.628656][T24434] ? qdisc_lookup+0x361/0x6c0 [ 1532.633359][T24434] tc_modify_qdisc+0xb47/0x1de0 [ 1532.638245][T24434] ? qdisc_offload_query_caps+0x150/0x150 [ 1532.643991][T24434] ? qdisc_offload_query_caps+0x150/0x150 [ 1532.649737][T24434] rtnetlink_rcv_msg+0x843/0xf90 [ 1532.654686][T24434] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1532.659810][T24434] ? rtnetlink_bind+0x80/0x80 [ 1532.664498][T24434] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1532.670493][T24434] ? lock_chain_count+0x20/0x20 [ 1532.675371][T24434] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1532.680762][T24434] ? lockdep_hardirqs_on+0x98/0x150 [ 1532.685981][T24434] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1532.691372][T24434] ? _local_bh_enable+0xa0/0xa0 [ 1532.696328][T24434] ? __dev_queue_xmit+0x275/0x3630 [ 1532.701454][T24434] ? __dev_queue_xmit+0x1bc2/0x3630 [ 1532.706682][T24434] ? __dev_queue_xmit+0x275/0x3630 [ 1532.711815][T24434] ? ref_tracker_free+0x686/0x830 [ 1532.716866][T24434] netlink_rcv_skb+0x235/0x4c0 [ 1532.721647][T24434] ? rtnetlink_bind+0x80/0x80 [ 1532.726337][T24434] ? netlink_ack+0x1160/0x1160 [ 1532.731136][T24434] ? __lock_acquire+0x7d80/0x7d80 [ 1532.738603][T24434] ? netlink_deliver_tap+0x2e/0x1b0 [ 1532.743814][T24434] netlink_unicast+0x7b1/0x930 [ 1532.748602][T24434] netlink_sendmsg+0x8d0/0xbf0 [ 1532.753382][T24434] ? netlink_getsockopt+0x590/0x590 [ 1532.758608][T24434] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1532.764188][T24434] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1532.769486][T24434] ? security_socket_sendmsg+0x80/0xa0 [ 1532.774954][T24434] ? netlink_getsockopt+0x590/0x590 [ 1532.780158][T24434] ____sys_sendmsg+0x61b/0x980 [ 1532.784950][T24434] ? __asan_memset+0x22/0x40 [ 1532.789555][T24434] ? __sys_sendmsg_sock+0x30/0x30 [ 1532.794585][T24434] ? __import_iovec+0x5f2/0x850 [ 1532.799454][T24434] ? import_iovec+0x73/0xa0 [ 1532.803983][T24434] ___sys_sendmsg+0x2a6/0x360 [ 1532.808672][T24434] ? __lock_acquire+0x7d80/0x7d80 [ 1532.813712][T24434] ? __sys_sendmsg+0x2b0/0x2b0 [ 1532.818526][T24434] __se_sys_sendmsg+0x1d0/0x2c0 [ 1532.823410][T24434] ? __x64_sys_sendmsg+0x80/0x80 [ 1532.828378][T24434] ? lockdep_hardirqs_on+0x98/0x150 [ 1532.833604][T24434] do_syscall_64+0x55/0xb0 [ 1532.838038][T24434] ? clear_bhb_loop+0x40/0x90 [ 1532.842729][T24434] ? clear_bhb_loop+0x40/0x90 [ 1532.847420][T24434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1532.853341][T24434] RIP: 0033:0x7f2a9b99df99 [ 1532.857772][T24434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.877387][T24434] RSP: 002b:00007f2a9c7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1532.885835][T24434] RAX: ffffffffffffffda RBX: 00007f2a9bc26090 RCX: 00007f2a9b99df99 [ 1532.894015][T24434] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1532.902022][T24434] RBP: 00007f2a9ba34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1532.910049][T24434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.918136][T24434] R13: 00007f2a9bc26128 R14: 00007f2a9bc26090 R15: 00007fff87e07ac8 [ 1532.926147][T24434] [ 1532.929203][T24434] Modules linked in: [ 1532.933157][T24434] CR2: fffffffffffffbc8 [ 1532.937335][T24434] ---[ end trace 0000000000000000 ]--- [ 1532.942823][T24434] RIP: 0010:strlen+0x39/0x70 [ 1532.947497][T24434] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 1532.967134][T24434] RSP: 0018:ffffc900031a6bd8 EFLAGS: 00010286 [ 1532.973219][T24434] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 1532.981287][T24434] RDX: ffffc9000dcdf000 RSI: 0000000000001ab5 RDI: fffffffffffffbc8 [ 1532.989288][T24434] RBP: ffffc900031a6d08 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 1532.997287][T24434] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 1533.005307][T24434] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 1533.013309][T24434] FS: 00007f2a9c7ec6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1533.022279][T24434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1533.028890][T24434] CR2: fffffffffffffbc8 CR3: 0000000069f71000 CR4: 00000000003506f0 [ 1533.036965][T24434] Kernel panic - not syncing: Fatal exception [ 1533.043126][T24434] Kernel Offset: disabled [ 1533.047459][T24434] Rebooting in 86400 seconds..