last executing test programs: 9m6.776436115s ago: executing program 32 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xdfd00be7e7eec087, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 8m37.3053131s ago: executing program 33 (id=384): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2c, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000780)={0x0, 0x4000, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 8m23.12599021s ago: executing program 34 (id=426): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r2, 0x4) 8m2.111585972s ago: executing program 35 (id=515): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback={0x0, 0x7f000001}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) 7m51.285315163s ago: executing program 36 (id=566): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x40, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x10, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc}}]}, 0x3c}}, 0x4002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m46.783910579s ago: executing program 37 (id=578): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 7m37.428635865s ago: executing program 38 (id=563): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) 7m6.436778772s ago: executing program 39 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 6m24.334044599s ago: executing program 40 (id=991): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 4m58.069657951s ago: executing program 41 (id=1399): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0xc020) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 4m10.914807055s ago: executing program 42 (id=1570): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0xac, r3, 0x1, 0x709d27, 0x25dfdc03, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "64365cdf2654d511126c63c3092481344229ed9ff48616fe230ed01b7c1307f4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc004811}, 0x24004084) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3m56.517173053s ago: executing program 43 (id=1696): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000600), &(0x7f00000006c0)=0x8) 3m13.129502713s ago: executing program 5 (id=1933): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) unshare(0x8040480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000240)={0x1d, r4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m12.738900866s ago: executing program 5 (id=1938): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xffffff00, 'veth0_macvtap\x00', 'geneve0\x00', {0xff}, {}, 0x62, 0x3, 0x15}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0953fe44d3b7cf74cdcbec194929756c03773c4a09ea38c3d7a1baebc26f"}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x6c, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x81, 0x3, 'syz1\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3m12.383289467s ago: executing program 5 (id=1942): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x119ca00, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m10.987008573s ago: executing program 5 (id=1949): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) 3m10.537293079s ago: executing program 5 (id=1954): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0x0, 0x7fff8000}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x98, 0x4}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) 3m10.159068201s ago: executing program 5 (id=1957): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) 3m9.457561155s ago: executing program 44 (id=1957): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) 1m59.550256903s ago: executing program 0 (id=2274): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000034a000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m57.525824021s ago: executing program 0 (id=2284): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) 1m54.893275638s ago: executing program 0 (id=2298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0x0, 0xb4c, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000c80)='GPL\x00', 0x1a5af24a, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0xf, 0x4, 0x9f0d}, 0x10, 0x14823, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x40000040) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m54.53371899s ago: executing program 0 (id=2301): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m54.319058997s ago: executing program 0 (id=2302): openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = msgget$private(0x0, 0x31) msgsnd(r1, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) 1m53.615079831s ago: executing program 0 (id=2306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000c00000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 1m52.333603953s ago: executing program 45 (id=2306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000c00000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 1m50.763049005s ago: executing program 7 (id=2317): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x2b4b) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1m49.252819905s ago: executing program 7 (id=2324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000800)={0x1ff, 0x0, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.055078662s ago: executing program 4 (id=2325): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040040) getpid() r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dedbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/174, 0xae}], 0x1) 1m48.752835862s ago: executing program 7 (id=2327): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1m46.628108772s ago: executing program 4 (id=2328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) fcntl$setown(r0, 0x8, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 1m44.845929061s ago: executing program 4 (id=2334): unshare(0x22020400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x76d800, 0x3, 0x81, 0xffffffff, 0x5}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xe59, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) 1m44.59613508s ago: executing program 4 (id=2337): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 1m43.613363752s ago: executing program 4 (id=2341): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000120"], 0x50) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffffd, {0x0, 0x0, 0x0, r1, {0xd}, {0x4}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x8008004) 1m41.030990268s ago: executing program 4 (id=2347): syz_open_dev$tty1(0xc, 0x4, 0x4) openat(0xffffffffffffff9c, 0x0, 0x42040, 0x1) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m40.722425408s ago: executing program 46 (id=2347): syz_open_dev$tty1(0xc, 0x4, 0x4) openat(0xffffffffffffff9c, 0x0, 0x42040, 0x1) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m40.117250528s ago: executing program 7 (id=2351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 1m39.092848633s ago: executing program 7 (id=2354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001780)=""/233, 0xe9}, {&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/4108, 0x100c}], 0x4}, 0xd}], 0x1, 0x10022, 0x0) 1m38.031040537s ago: executing program 7 (id=2358): syz_open_dev$mouse(0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) keyctl$negate(0xd, 0x0, 0xf, r1) 1m37.701624238s ago: executing program 47 (id=2358): syz_open_dev$mouse(0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) keyctl$negate(0xd, 0x0, 0xf, r1) 37.686534599s ago: executing program 8 (id=2677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x7}, {0x8}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 36.693491513s ago: executing program 8 (id=2672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18) 35.243059631s ago: executing program 8 (id=2684): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x6000b20c, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 34.106961018s ago: executing program 8 (id=2690): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x2, 0x1518, &(0x7f0000000280)="$eJzs3Au4TtXWOPAx5pxLm8Sb5D7HHIs3uUySJJeERJIkR5J7QpIkSUhscktCEnJPcg/JLST3+y33JDmSJAkJSeb/0anPOadzTuf8z/k+3/Pt8Xue9ew59nrHeMfa4332u9baz36/7jCoct0qFWszM/xb8E9fUgEgBQD6AkBmAIgAoESWElkAh0J6jan/3pOI/6wHp17pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpOa+VLe1u/8r9/wz/aOfv3v8Huf//v468//8fcrjI6M/XF7m+47+QIvNP22T+aZvMP22T+adtMv+0Teb/f1wEUOEf7Jb5p20yfyHSsit9/1m2K7td6defEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoi04Vy4zADAr+sr3ZcQQgghhBBCCCH+c8JVfx6lu3KNCCGEEEIIIYQQ4r8RggINBiJIB1dBCqSHDHA1ZIRrIBNkhgRcC1ngOsgK10M2yA45ICfkgtyQBywQOGCIIS/kgyTcAPnhRigABaEQFAYPRaAo3ATF4GYoDrdACbgVSsJtUApKQxkoC7dDObgDykMFqAh3QiW4CypDFbgbqsI9UA3uhepwH9SA+6EmPAC14A9QGx6EOvAQ1IWHoR7UhwbQEBpBY2jy/5X/PHSBF6ArdINU6A494EXoCb2gN/SBvvAS9IOXoT+8AgNgIAyCV2EwvAZD4HUYCsNgOLwBI2AkjILRMAbGwjh4E8bDWzAB3oaJMAkmwxSYCtNgOrwDM2AmzIJ3YTa8B3NgLsyD+bAA3oeFsAgWwwewBD6EpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGt8BFsg+2wA3bCLtgNe+Bj2AufwD74FPbDZ3+dn/kf55/9q/yOCAioUKFBg+kwHaZgCmbADJgRM2ImzIQJTGAWzIJZMStmw2yYA3NgLsyFeTAPEhIyMubFvJjEJObH/FgAC2AhLIQePRbFolgMb8biWBxLYAksiSWxFJbG0lgWy2I5LIflsTxWxIpYCSthZayMd+PdeA9Ww2pYHatjDayBNbEm1sJaWBtrYx2sg3WxLtbDetgAG2AjbIRNsAk2xabYDJthC2yBLbEltsJW2BpbYxtsg20RsR22w/bYHjtgB+yInbATPo/P4wv4AnbDSqo79sAe2BN7Ym/sg33wJeyHL+PL+AoOwIE4CF/FV/E1HIJncCgOw+E4HMupkTgKRyOrsTgOx+F4HI8TcAJOxEk4CafgVJyG03E6zsCZOBPfxdn4Hr6Hc3EuzscFuAAX4iJcjItxCZ7FpbgMl+MKXImrcCWuwbW4BtfjBlyPm3ATbsEt+BF+hNtxO+7Enbgbd+PH+DF+gp/gANyP+/EAHsCDeBAP4SE8jIfxCB7Bo3gUj+ExPI7H8QSexFN4Ek/jaTyDZ/EcnsPzeB4v4LO5vqyzu+C6AaAuMcqodCqdSlEpKoPKoDKqjCqTyqQSKqGyqCwqq8qqsqlsKofKoXKpXCqPyqNIkWIVq7wqr0qqpMqv8qsCqoAqpAopr7wqqoqqYqqYKq6KqxLqVlVS3aZKqdKquS+ryqpyqoUvryqoiqqiqqTuUpVVFVVFVVVVVTVVTVVX1VUNVUPVVA+oWqo79sYH1aXJ1FUDsZ4ahA1UQ9VINVav4SOqqRqCzVRz1UI9pobhUGylmvrW6knVRo3CtuppNRqfUe3VWOygnlMdVSfVWT2vuqhmvuuvtzvVFOypeqneqo+agXepSxOrrF5RA9RANUi9qubja2qIel0NVcPUcPWGGqFGqlFqtBqjxqpx6k01Xr2lJqi31UQ1SU1WU9RUNU1NV++oGWqmmqXeVbPVe2qOmqvmqflqgXpfLVSL1GL1gVqiPlRL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9VHapvarnaonWqX2q32qI/VXvWJ2qc+VfvVZ+qA+qM6qD5Xh9QX6rD6Uh1RX6mj6mt1TH2jjqtv1Ql1Up1S36nT6vvEGXVWnVM/qPPqR3VB/aQuqqBAo1Zaa6MjnU5fpVN0ep1BX61BX6Mz6cw6oa/VWfR1Oqu+XmfT2XUOnVPn0rl1Hm01aadZxzqvzqeT+gadX9+oC+iCupAurL0uoovqm3QxfbMurm/RJfStuqS+TZfSpXUZXVbfrsvpO3R5XUFX1HfqSvouXVlX0XfrqvoeXU3fq6vr+3QNfb+uqR/QtfQfdG39oK6jH9J19cO6nq6vG+iGupFurJvoR3RT/ahuppvrFvox3VI/rlvpJ3Rr/aRuo5/SbfXTup1+RrfXz+oO+jndUXfSnfVP+qIOuqvuplN1d91Dv6h76l66t+6j++qXdD/9su6vX9ED9EA9SL+qB+vX9BD9uh6qh+nh+g09Qo/Uo/RoPUaP1eP0m3q8fktP0G/riXqSnqyn6Kl6mu79S6VZ/0T+W38jv//Pz75Fb9Uf6W16u96hd+pderfeo/fovXqv3qf36f16vz6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+rg+oU/qH/R3+rT+Xp/RZ/VZ/YM+r8/rC7/8DMCgUUYbYyKTzlxlUkx6k8FcbTKaa0wmk9kkzLUmi7nOZDXXm2wmu8lhcppcJrfJY6wh4wyb2OQ1+UzS3GDymxtNAVPQFDKFjTdFTFFz07+d/3v9NTFNTFPT1DQzzUwL08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NB9PBdDQdTWfT2XQxXUxX09WkmlTTw7xoeppeprfpY/qal0w/08/0N/3NADPADDKDzGAz2AwxQ8xQM9QMN8PNCDPCjDKjzBgzxowz48x4M95MMBPMRDPRTDaTzVQz1Uw3080MM8PMMrPMbDPbzDFzzDwzzywwC8xCs9AsNovNErPELDXLzDKzwqwwq8wqs8asMevMOrPBbDCbzCaz1Gw1W802s83sMDvMLrPL7DF7zF6z1+wz+8x+s98cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMcXPcnDAnzClzypw2p80Zc8acM+fMeXPeXDAXzEVz8dJpX6QiFZnIROmidFFKlBJliDJEGaOMUaYoU5SIElGWKEuUNbo+yhZlj3JEOaNcUe4oFWxEkYs4iqO8Ub4oGd0Q5Y9ujApEBaNCUeHIR0WiotFNUbHo5qh4dEtUIro1KhndFpWKSkdlorLR7VG56I6ofFQhqhjdGVWK7ooqR1Wiu6Oq0T1RtejeqHp0X1Qjuj+qGT0Q1Yr+ENWOHozqRA9FdaOHo3pR/ahB1DBqFDWOmvxH64dwJvujvqvtZlNtd9vDvmh72l62t+1j+9qXbD/7su1vX7ED7EA7yL5qB9vX7BD7uh1qh9nh9g07wo60o+xoO8aOtePsm3a8fctOsG/biXaSnWyn2Kl2mp1u37Ez7Ew7y75rZ9v37Bw7186z8+0C+75daBfZxfYDu8R+aJfaZXa5XWFX2lV2tV1j19p1dr3dYDfaTXaz3WK32o/sNrvd7rA77S672+6xH9u99hO7z35q99vP7AH7R3vQfm4P2S/sYfulPWK/skft1/aY/cYet9/aE/akPWW/s6ft9/aMPWvP2R/sefujvWB/shdtuHRyf+ntnQwZSkfpKIVSKANloIyUkTJRJkpQgrJQFspKWSkbZaMclINyUS7KQ3noEiamvJSXkpSk/JSfClABKkSFyJOnolSUilExKk7FqQSVoJJUkkpRKSpDZeh2up3uoDuoAlWgO+lOuovuoipUhapSVapG1ag6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qAE1oEbUiJpQE2pKTakZNaMW1IJaUktqRa2oNbWmNtSG2lJbakftqD21pw7UgTpSR+pMnakLdaGu1JVSKZV6UA/qST2pN/WmvtSX+lE/6k/9aQANoEE0iAbTYBpCQ2goDaPh9AaNoJE0ikbTGBpL42gcjafxNIEm0ESaSJNpMk2lqTSdptMMmkGzaBbNptk0h+bQPJpHC2gBLaSFtJgW0xJaQktpKS2n5bSSVtJqWk1raS2tp/W0kTbSZtpMW2krbaNttIN20C7aRXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydpx/pAv1EFylQilOQwV3tMrprXCaX2aW49O5SHAHApTiHy+lyudwuj7Mum8v+FzE55wq4gq6QK+y8K+KKupt+E5dypV0ZV9bd7sq5O1z538RV3T2umrvXVXf3uSru7r+Ia7j7XU33sKvl6rvarqGr4xq7utHDrp6r7xq4hq6Ra+xausddK/eEa+2edG3cU7+JF7pFbq1b59a7DW6v+8Sdcz+4o+5rd9796Lq6bq6ve8n1cy+7/u4VN8AN/E083L3hRriRbpQb7ca4sb+JJ7spbqqb5qa7d9wMN/M38QL3vpvtFrs5bq6b5+b/HF/qabH7wC1xH7qlbplb7la4lW6VW+3W/FevK9wmt9ltcXvcx26b2+52uJ1hl9v9c3zpOPa5T91+95k74r5yB93n7pA75g67L3+OLx3fMfeNO+6+dSfcSXfKfedOu+/dGXf25+O/dOzfuZ/cRRccMLJizYYjTsdXcQqn5wx8NWfkazgTZ+YEX8tZ+LrMmfl6zsbZOQfn5Fycm/OwZWLHzDHn5Xyc5Bs4P9/IBbggF+LC7LkIF+WbuBjfzMX5Fi7Bt3JJvo1LcWkuw2X5dq4fQijPFbgi38mVQuDKXIXv5qp8D1fje7k638c1+H6uyQ9wLf4D1+YHuQ4/xHX5Ya7H9bkBN+RG3Jib8CPclB/lZtycW/Bj3JIf51b8BLfmJ7kNP8Vt+Wlux89we36WO/Bz3JE7cWd+nrvwC9yVu3Eqd+ce/CL35F7cm/twX36J+/HL3J9f4QE8kAfxqzyYX+Mh/DoP5WE8nN/gETySR/FoHsNjeRy/yeP5LZ7Ab/NEnsSTeQpP5Wk8nd/hGTyTZ/G7PJvf4zk8l+fxfF7A7/NCXsSL+QNewh/yUl7Gy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW/oi38XbewTt5F+/mPfwx7+VPeB9/yvv5Mz7Af+SD/Dkf4i/4MH/JR/grPspf8zH+ho/zt3yCT/Ip/o5P8/d8hs/yOf6Bz/OPfIF/4oscGGKMVaxjE0dxuviqOCVOH2eIr44zxtfEmeLMcSK+Ns4SXxdnja+Ps8XZ4xxxzjhXnDvOE9uYYhdzHMd543xxMr4hzh/fGBeIC8aF4sKxj4vEReOb4mLxzXHx+Ja4RHxrXDK+LYbU0vHD95WNb4/LxXfE5eMKccX4zrhSfFdcOa4S3x1Xje+Jq8X3xtXj++Li8f1xzfiBuFb8h7h2/GBcJ34orhs/HNeL68cN4oZxo7hx3CR+JG4aPxo3i5vHLeLH4pbx43Gr+Im4dfxk3CZ+6nf3p8bd4x7xi/GLcQj3ql+uE5MLk4uSi5MfJJckP0wuTS5LLk+uSK5MrkquTq5Jrk2uS65PbkhuTG5Kbk5uSYZQ5Srw6JXX3vjIp/NX+RSf3mfwV/uM/hqfyWf2CX+tz+Kv81n99T6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Df4/P5GX8AX9IV8Ye99EV/UN/ZNfBPf1D/qm/nmvoV/zD/mH/eP+yf8E/5J38Y/5dv6p307/4xv75/1z/rnfEffyXf2z/su/gXf1XfzqT7V9/A9fE/f0/f2vX1f39f38/18f9/fD/AD/CA/yA/2g/0QP8QP9UP9cD/cj/Aj/Cg/yo/xY/w4P86P9+P9BD/BT/QT/WQ/2U/1U/10P93P8DP8LD/Lzy4w28/xc/w8P88v8Av8Qr/QL/aL/RK/xC/1S/1yv9yv9Cv9ar/ar/Vr/Xq/3m/0G/1mv9lv9Vv9Nr/N7/A7/C6/y+/xe/xev9fv8/v8fr/fH/AH/EF/0B/yX/jD/kt/xH/lj/qv/TH/jT/uv/Un/El/yn/nT/vv/Rl/1p/zP/jz/kd/wf/kL/rgxyXeTIxPvJWYkHg7MTExKTE5MSUxNTEtMT3xTmJGYmZiVuLdxOzEe4k5ibmJeYn5iQWJ9xMLE4sSixMfJJYkPkwsTSxLLE+sSKxMrEqEkHtbHPKGfCEZbgj5w42hQCgYCoXCwYcioWi4KRQLN4fi4ZZQItwaSobbQqlQOpQJ9UOD0DA0Co1Dk/BIaBoeDc1C89AiPBZahsdDq/BEaB2eDG3CU6FteDq0C8+E9uHZ0CE8FzqGTqFzeD50CS+ErqFbSA3dQ4/wYugZeoXeoU/oG14K/cLLoX94JQwIA8Og8GoYHF4LQ8LrYWgYFoaHN8KIMDKMCqPDmDA2jAtvhvHhrTAhvB0mhklhcpgSpoZpYXp4J8wIM8Os8G6YHd4Lc8LcMC/MDwvC+2FhWBQWhw/CkvBhWBqWheVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gaPgrbwvawI+wMu8LusCd8HPaGT8K+8GnYHz4LB8Ifw8HweTgUvgiHw5fhSPgqHA1fh2Phm3A8fBtOhJPhVPgunA7fhzPhbDgXfgjnw4/hQvgpXJT/WRNCCCGE+Kfo39nf/W98Lx0A/HpJ1AMArtme8/Bf19yY7U/rXipXywQAPNmtw4O/bpUqpaam/vLYpRqifHMBIPGX9X+Nl0ELeBxaQ3Mo9jf766U6neffqZ+8FSDDz9GfThFT4Nf4z+vf/HfqP/LY8IUl43NZ/kH9uQAF8l3OSQ+X48v1i/+d+tmb/k7/6T8fB9Dsz3IywuX4cv2i8Cg8Ba3/4pFCCCGEEEIIIcSf9FJl2v3960/9X9fnuczlnKvgcvx71+dCCCGEEEIIIYS48p7p1PmJR1q3bt7un1vgL3+X/tey/u4i5Zcu/t06spDF/9gifdp40V6p30hCCCGEEEKI/y6XT/qvdCdCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTa9T/xcWJX+hiFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+3/BQAA//++0jN5") syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f0000002240)='./file1\x00', &(0x7f0000000040)='.\x02\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00001e6000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xa75) 33.186992079s ago: executing program 8 (id=2697): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x115) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0xd, 0x9}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 32.622828987s ago: executing program 8 (id=2700): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x14}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 31.979190509s ago: executing program 48 (id=2700): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x14}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 11.962018993s ago: executing program 6 (id=2813): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) close(0x3) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4800003e, r2, 0x0) 11.708332222s ago: executing program 6 (id=2815): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) unshare(0x62040200) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 10.231387911s ago: executing program 6 (id=2824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) 8.870234346s ago: executing program 6 (id=2829): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000e9f000/0x1000)=nil) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000f5e000/0x4000)=nil) shmat(r0, &(0x7f0000df6000/0x1000)=nil, 0x4000) syz_clone(0x6626f080, 0x0, 0x4e, 0x0, 0x0, 0x0) munlockall() 6.912050251s ago: executing program 3 (id=2838): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.202479854s ago: executing program 2 (id=2842): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x884) 4.450641762s ago: executing program 9 (id=2854): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0xf, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x3, 0x76c4, 0x10, 0x1000000007}) 4.367377675s ago: executing program 9 (id=2855): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 3.263238581s ago: executing program 1 (id=2859): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, r4) 3.182266334s ago: executing program 1 (id=2860): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x88}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 3.066255148s ago: executing program 1 (id=2861): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x20004, &(0x7f0000000380)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_eq}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x01'}}, {@subj_type={'subj_type', 0x3d, '\xe2'}}]}, 0x0, 0x242, &(0x7f0000000680)="$eJzs3TFoJFUcBvBvZneNuVvk1EYQVBARDYSzE2zORuFAjkNEUCEiYqMkQkywS6xsLLRWSWUTxM5oKWmCjSJYRU0RG0GDhcFCi5XZSSQmKwoTd+Tm94PZndl9b/5vmP3ebDNMgM66lORKkl6SuSSDJMXJBvfUy6WjzY3ZnYVkNHry52Lcrt6uHfe7mGQ9ycNJtssiL/eT1a1n93/dffz+t1YG932w9czsVA/yyMH+3hOH71978+OrD61++fWP14pcyfAvx3X+igmf9Yvktv+i2P9E0W97BPwb11//6Jsq97cnuXec/0HK1Cfv7eWbtgd58L2/6/vOT1/dOc2xAudvNBpU18D1EdA5ZZJhinI+Sb1elvPz9X/4b3sXyleWll+be2lpZfHFtmcq4LwMk73HPp355OKp/P/Qq/MP3Liq/D91ffO7av2w1/ZogGmq8j/3/NoDqfM/0/Z4gOk5lX+gQybnv2x1TMB0uP5Dd8k/dJf8Q3fJP3SX/EN3yT90l/xDd53MPwDQLaOZtu9ABtrS9vwDAAAAAAAAAAAAAAAAAACctTG7s3C8TKvm5+8mB48m6U+q3zt6GtHN49cLvxRVsz8VdbdGnru74Q4a+rDlu69v+b7d+l/c1W79tcVk/Y0kl/v9s7+/ovHTsG79h+8HLwwbVmjmkadbLZ/fN9utf3U3+ayafy5Pmn/K3DF+nzz/VGdu0LD+q7813AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABT80cAAAD//wSRbT4=") setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) 2.880220014s ago: executing program 3 (id=2862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xfffffffffffffe3d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) 2.787327188s ago: executing program 2 (id=2863): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x1, 0x6, 0xe}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0xb1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0xb1}, 0x39) 2.70778963s ago: executing program 9 (id=2864): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2.638211892s ago: executing program 3 (id=2865): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 2.502523947s ago: executing program 2 (id=2866): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 2.447262779s ago: executing program 9 (id=2867): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x97, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000001580)="$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") setregid(r3, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 2.360389252s ago: executing program 1 (id=2868): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000500)=0xfe3d) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6b, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) 2.282880914s ago: executing program 3 (id=2869): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000380)=[{0x2, 0x0, {0x1, 0xff, 0x2}, {0x1}, 0xfe, 0xff}, {0x2, 0x0, {0x2, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 2.114942919s ago: executing program 1 (id=2870): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000100), 0x4) 2.037295522s ago: executing program 2 (id=2871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0x2]}, 0x8) close_range(r1, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb33278ae95bc7f52363c468b257ff3e2485254bdeb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af370a42e6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1010000000000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) signalfd(r2, &(0x7f0000000240)={[0xc18]}, 0x8) 1.22047768s ago: executing program 1 (id=2872): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x4000000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x0, 0x9, 0x4, 0x800043, 0x2d62, 0x10, r3}, 0x20) 1.057490965s ago: executing program 9 (id=2873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 957.015828ms ago: executing program 3 (id=2874): r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = fanotify_init(0x40, 0x80000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x0) 749.682315ms ago: executing program 2 (id=2875): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x4020, 0x0, "bb02a3c344cad76dc6e634c79695400400000010218a0effffffff00c534a632cd619317f29b2df307008afaa4ff1f56c54dc46d8b6d2ccd0039211f087bbe00000000000000000000000000000200"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 575.712721ms ago: executing program 3 (id=2876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000826000/0x1000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 417.966726ms ago: executing program 6 (id=2877): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 164.017485ms ago: executing program 9 (id=2878): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 88.226507ms ago: executing program 2 (id=2879): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000300)=ANY=[], 0xc1, 0x151f, &(0x7f0000000440)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 0s ago: executing program 6 (id=2880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syslog(0xe, 0x0, 0x0) syz_emit_ethernet(0x121b, 0x0, 0x0) clock_getres(0x0, 0x0) kernel console output (not intermixed with test programs): g interface the new active one [ 510.991048][ T27] audit: type=1326 audit(1781017174.808:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842b19ce59 code=0x7ffc0000 [ 511.021351][ T27] audit: type=1326 audit(1781017174.808:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f842b19ce59 code=0x7ffc0000 [ 511.046587][ T27] audit: type=1326 audit(1781017174.808:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842b19ce59 code=0x7ffc0000 [ 511.075875][T11979] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 511.109233][T10671] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 511.130011][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.143506][ T27] audit: type=1326 audit(1781017174.808:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842b19ce59 code=0x7ffc0000 [ 511.168102][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.186001][T11781] device bridge_slave_0 entered promiscuous mode [ 511.226419][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.244236][ T27] audit: type=1326 audit(1781017174.808:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842b19ce59 code=0x7ffc0000 [ 511.282404][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.321243][T11781] device bridge_slave_1 entered promiscuous mode [ 511.350977][ T27] audit: type=1326 audit(1781017174.808:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f842b19ce59 code=0x7ffc0000 [ 511.410322][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.429219][ T27] audit: type=1326 audit(1781017174.808:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f842b196bd7 code=0x7ffc0000 [ 511.465104][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.538737][ T27] audit: type=1326 audit(1781017174.808:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.7.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f842b13e1d9 code=0x7ffc0000 [ 511.606978][T11995] input: syz0 as /devices/virtual/input/input15 [ 511.643130][T11781] team0: Port device team_slave_0 added [ 511.675842][T11781] team0: Port device team_slave_1 added [ 511.833025][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.882445][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.987621][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.056007][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.100460][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.167897][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.190862][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'. [ 512.335001][T11781] device hsr_slave_0 entered promiscuous mode [ 512.379868][T11781] device hsr_slave_1 entered promiscuous mode [ 512.401398][T11781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.440578][T11781] Cannot create hsr debugfs directory [ 513.746655][T11781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.786367][T11781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.827996][T12017] loop1: detected capacity change from 0 to 32768 [ 513.835696][T11781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.889574][T12017] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 513.902628][T11781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 514.122008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 514.132021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 514.141993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 514.151993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 514.161984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 514.625969][T11781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.681273][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.706250][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.726110][ T4267] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 514.751040][T11781] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.809626][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.834305][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.881889][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.889145][ T8272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.946954][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.992884][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 515.043397][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.083421][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.090614][ T8272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.179650][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.213243][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 515.238994][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 515.304740][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.349016][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.367389][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.446395][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.461323][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.477104][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.512998][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.538246][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.559099][T11781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 516.154655][T12063] loop0: detected capacity change from 0 to 1024 [ 516.258541][T12063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 516.290251][T12063] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.312750][T12063] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.326912][T12063] EXT4-fs (loop0): Remounting filesystem read-only [ 516.336515][T12063] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.351466][T12063] EXT4-fs (loop0): Remounting filesystem read-only [ 516.359105][T12063] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.374399][T12063] EXT4-fs (loop0): Remounting filesystem read-only [ 516.383505][T12063] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.412184][T12063] EXT4-fs (loop0): Remounting filesystem read-only [ 516.427310][T12062] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.479272][T12062] EXT4-fs (loop0): Remounting filesystem read-only [ 516.495613][T12063] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.526362][T12063] EXT4-fs (loop0): Remounting filesystem read-only [ 516.562273][T12062] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.632620][T12062] EXT4-fs (loop0): Remounting filesystem read-only [ 516.647204][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.655314][T12062] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.700155][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.740664][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.789631][T12062] EXT4-fs (loop0): Remounting filesystem read-only [ 516.812060][T12063] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.846773][T12063] EXT4-fs (loop0): Remounting filesystem read-only [ 516.872750][T12063] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.2028: lblock 0 mapped to illegal pblock 0 (length 1) [ 517.642724][T12106] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2036'. [ 517.798948][T12112] loop7: detected capacity change from 0 to 1024 [ 518.215293][ T8274] hfsplus: b-tree write err: -5, ino 25 [ 518.221357][ T8274] hfsplus: b-tree write err: -5, ino 4 [ 518.251843][T12107] device syzkaller1 entered promiscuous mode [ 518.258241][ T8274] hfsplus: b-tree write err: -5, ino 2 [ 518.280663][ T8274] hfsplus: b-tree write err: -5, ino 17 [ 518.326494][T12124] loop6: detected capacity change from 0 to 2048 [ 518.390726][T12124] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.408458][T12124] EXT4-fs: Ignoring removed i_version option [ 518.517435][T12124] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 518.563139][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 518.610455][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.769201][T10570] EXT4-fs (loop6): unmounting filesystem. [ 518.801432][T11781] device veth0_vlan entered promiscuous mode [ 518.818819][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 518.829451][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.102083][ T4835] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 519.283279][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.291380][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.961636][T11781] device veth1_vlan entered promiscuous mode [ 519.983801][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 520.032104][ T4835] usb 8-1: Using ep0 maxpacket: 8 [ 520.039668][ T4835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.059992][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2045'. [ 520.070044][ T4835] usb 8-1: config 0 has no interfaces? [ 520.088650][ T4835] usb 8-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 520.124394][ T4835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.143895][ T4835] usb 8-1: config 0 descriptor?? [ 520.587645][T12154] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 520.600635][ T6805] device hsr_slave_0 left promiscuous mode [ 520.618030][ T6805] device hsr_slave_1 left promiscuous mode [ 520.644734][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.665437][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.703223][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.715218][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.728119][ T6805] device bridge_slave_1 left promiscuous mode [ 520.739060][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.749518][ T4834] usb 8-1: USB disconnect, device number 10 [ 520.791320][ T6805] device bridge_slave_0 left promiscuous mode [ 520.800247][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.907335][ T6805] device veth1_macvtap left promiscuous mode [ 520.936404][ T6805] device veth0_macvtap left promiscuous mode [ 520.945690][ T6805] device veth1_vlan left promiscuous mode [ 520.953092][ T6805] device veth0_vlan left promiscuous mode [ 521.660933][T12169] loop7: detected capacity change from 0 to 1024 [ 521.949171][T12171] loop0: detected capacity change from 0 to 512 [ 522.013398][T12171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 522.218433][ T7917] EXT4-fs (loop0): unmounting filesystem. [ 523.079103][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 523.314490][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 523.526705][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.450715][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.729942][T12206] loop1: detected capacity change from 0 to 128 [ 524.759270][T12206] EXT4-fs: Ignoring removed nobh option [ 524.809096][T12206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 524.842060][ T4324] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 524.894267][T12206] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 525.055339][ T4324] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 525.088806][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.121991][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.137824][ T4324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 525.152414][ T4324] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 525.161505][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.171862][ T4324] usb 1-1: config 0 descriptor?? [ 525.182062][T10801] EXT4-fs (loop1): unmounting filesystem. [ 525.210851][T12212] loop7: detected capacity change from 0 to 8 [ 525.594942][ T4324] holtek_kbd 0003:04D9:A055.0008: item fetching failed at offset 5/7 [ 525.633961][ T4324] holtek_kbd: probe of 0003:04D9:A055.0008 failed with error -22 [ 525.918938][T12230] binder: 12222:12230 ioctl c0306201 200000000480 returned -14 [ 526.199406][ T6805] bond0 (unregistering): Released all slaves [ 526.334578][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.344675][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.357584][T11781] device veth0_macvtap entered promiscuous mode [ 526.474441][T11781] device veth1_macvtap entered promiscuous mode [ 526.535480][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.556395][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.573517][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.634564][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.705539][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.748198][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.784111][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.846601][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.870940][T12240] input: syz1 as /devices/virtual/input/input16 [ 526.895030][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.920987][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.948409][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.960658][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.988422][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.000226][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2077'. [ 527.102792][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.147229][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.207546][T11781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.245749][T11781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.269388][T11781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.300882][T11781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.564836][ T4834] usb 1-1: USB disconnect, device number 11 [ 527.965442][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.009909][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.076918][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 528.084518][ T4834] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 528.114373][T12209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.145320][T12209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.165933][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 528.283241][ T4834] usb 1-1: Using ep0 maxpacket: 32 [ 528.296895][ T4834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.338846][ T4834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.362482][ T4834] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 528.383412][ T4834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.428977][ T4834] usb 1-1: config 0 descriptor?? [ 528.865937][ T4834] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 528.884559][ T4834] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 528.915714][ T4834] ft260 0003:0403:6030.0009: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 529.068006][ T4834] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 529.377783][T12293] device bond1 entered promiscuous mode [ 529.476225][ T4834] ft260 0003:0403:6030.0009: failed to retrieve status: -32 [ 529.701662][T12260] ft260 0003:0403:6030.0009: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 529.976960][T12260] ft260 0003:0403:6030.0009: failed to reset I2C controller: -108 [ 529.997884][T12260] ft260 0003:0403:6030.0009: ft260_i2c_write: failed to start transfer, ret -38 [ 530.837300][ T4326] usb 1-1: USB disconnect, device number 12 [ 532.303346][T12354] loop7: detected capacity change from 0 to 512 [ 532.408763][T12354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 532.472132][T12354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 532.491537][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2103'. [ 532.589035][T12354] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 532.632720][T12354] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.862475][T12354] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #18: block 20: comm syz.7.2101: lblock 0 mapped to illegal pblock 20 (length 1) [ 532.963540][T12354] EXT4-fs (loop7): Remounting filesystem read-only [ 533.137080][ T6805] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm kworker/u4:14: Invalid inode table block 34 in block_group 0 [ 533.169697][ T6805] EXT4-fs (loop7): Remounting filesystem read-only [ 533.208983][ T5708] EXT4-fs (loop7): unmounting filesystem. [ 533.240293][ T5708] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 533.309403][ T5708] EXT4-fs (loop7): Remounting filesystem read-only [ 533.322423][ T5708] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 533.383683][ T5708] EXT4-fs (loop7): Remounting filesystem read-only [ 533.411057][ T5708] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 533.444899][ T5708] EXT4-fs (loop7): Remounting filesystem read-only [ 533.479059][ T5708] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 533.517727][ T5708] EXT4-fs (loop7): Remounting filesystem read-only [ 533.526414][ T5708] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 533.551610][ T5708] EXT4-fs (loop7): Remounting filesystem read-only [ 533.581535][ T5708] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 533.622403][ T5708] EXT4-fs (loop7): Remounting filesystem read-only [ 533.642015][ T4323] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 533.839711][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.864245][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.906956][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.981617][ T4323] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.034064][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.070277][ T4323] usb 1-1: config 0 descriptor?? [ 534.130706][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2111'. [ 534.175566][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2111'. [ 534.205318][T12390] tipc: Enabled bearer , priority 0 [ 534.216444][T12390] syzkaller0: MTU too low for tipc bearer [ 534.223084][T12390] tipc: Disabling bearer [ 534.233206][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2111'. [ 534.487388][ T4323] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 534.518748][ T4323] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 534.660038][T12393] netlink: 'syz.1.2112': attribute type 27 has an invalid length. [ 534.809067][ T26] usb 1-1: USB disconnect, device number 13 [ 534.932137][T12402] fido_id[12402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 535.590441][T12393] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.598062][T12393] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.210472][T12393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.297779][T12393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.486052][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 538.724194][T12393] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.733926][T12393] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.743211][T12393] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.755805][T12393] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.058900][T12393] device bond1 left promiscuous mode [ 539.842032][ T14] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 540.050786][ T14] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 540.073223][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.111716][ T14] usb 5-1: config 0 has no interfaces? [ 540.141352][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 540.180245][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.231073][ T14] usb 5-1: config 0 descriptor?? [ 540.301237][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.408029][T12492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.132045][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 541.339705][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.364751][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.404363][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.486912][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.505287][ T7] usb 1-1: config 0 descriptor?? [ 542.545691][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 542.572062][ T4357] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 542.962337][ T14] usb 5-1: USB disconnect, device number 5 [ 543.034217][T12536] netlink: 'syz.6.2151': attribute type 11 has an invalid length. [ 543.500220][T12546] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 543.604211][T12546] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 543.664581][T12546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.236823][ T7] usb 1-1: USB disconnect, device number 14 [ 545.253980][ T4357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 545.309788][ T4357] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 545.346791][ T4357] usb 2-1: can't read configurations, error -71 [ 547.552571][T12597] loop4: detected capacity change from 0 to 40427 [ 547.584111][T12597] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 547.602396][T12597] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 547.638461][T12597] F2FS-fs (loop4): invalid crc value [ 547.691225][T12597] F2FS-fs (loop4): Found nat_bits in checkpoint [ 547.755730][T12632] loop1: detected capacity change from 0 to 256 [ 547.828985][T12632] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 547.988419][T12597] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 548.009052][T12597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 549.290203][T12597] syz.4.2167: attempt to access beyond end of device [ 549.290203][T12597] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 550.425625][T12699] loop1: detected capacity change from 0 to 128 [ 550.501764][T12699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 550.581834][T12699] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 550.984487][T12699] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 551.102294][ T14] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 551.306637][ T14] usb 8-1: no configurations [ 551.311322][ T14] usb 8-1: can't read configurations, error -22 [ 551.321235][T10801] EXT4-fs (loop1): unmounting filesystem. [ 551.484179][ T14] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 551.697016][ T14] usb 8-1: no configurations [ 551.701731][ T14] usb 8-1: can't read configurations, error -22 [ 551.732065][ T14] usb usb8-port1: attempt power cycle [ 551.816930][T12726] loop6: detected capacity change from 0 to 4096 [ 551.889224][T12726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 551.904282][T12737] loop4: detected capacity change from 0 to 4096 [ 551.980692][T12737] NILFS (loop4): invalid segment: Checksum error in segment payload [ 551.989611][T12737] NILFS (loop4): trying rollback from an earlier position [ 552.010105][T10570] EXT4-fs (loop6): unmounting filesystem. [ 552.036140][T12737] NILFS (loop4): recovery complete [ 552.064088][T12745] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.152023][ T14] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 552.193207][ T14] usb 8-1: no configurations [ 552.197904][ T14] usb 8-1: can't read configurations, error -22 [ 552.382183][ T14] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 552.424764][ T14] usb 8-1: no configurations [ 552.429440][ T14] usb 8-1: can't read configurations, error -22 [ 552.468364][ T14] usb usb8-port1: unable to enumerate USB device [ 552.985272][T12760] md: invalid raid superblock magic on ram0 [ 552.991407][T12760] md: ram0 does not have a valid v0.0 superblock, not importing! [ 553.034160][T12760] md: md_import_device returned -22 [ 553.107500][T12764] loop1: detected capacity change from 0 to 128 [ 553.244123][T12764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 553.410655][T12764] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 553.512226][T12774] loop0: detected capacity change from 0 to 2048 [ 553.591115][T12774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 553.800817][T10801] EXT4-fs (loop1): unmounting filesystem. [ 554.003727][ T7917] EXT4-fs (loop0): unmounting filesystem. [ 554.404230][T12803] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 555.336780][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2224'. [ 555.449066][T12828] device team1 entered promiscuous mode [ 555.471026][T12828] 8021q: adding VLAN 0 to HW filter on device team1 [ 555.506041][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2224'. [ 555.589488][T12831] device team2 entered promiscuous mode [ 555.625997][T12831] 8021q: adding VLAN 0 to HW filter on device team2 [ 556.138579][T12845] loop1: detected capacity change from 0 to 4096 [ 556.331012][T12845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 557.038669][ T4325] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 557.089131][T10801] EXT4-fs (loop1): unmounting filesystem. [ 557.185532][ T4325] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 557.329799][T12882] loop0: detected capacity change from 0 to 4096 [ 557.443312][T12882] EXT4-fs: Ignoring removed orlov option [ 557.557219][T12882] EXT4-fs (loop0): Test dummy encryption mode enabled [ 557.612515][T12882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 558.830991][ T7917] EXT4-fs (loop0): unmounting filesystem. [ 559.001996][T12896] loop4: detected capacity change from 0 to 8192 [ 559.712377][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 559.757247][T12896] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 559.770421][T12896] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 559.781091][T12896] REISERFS (device loop4): using ordered data mode [ 559.787922][T12896] reiserfs: using flush barriers [ 559.817465][T12896] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 559.835649][T12896] REISERFS (device loop4): checking transaction log (loop4) [ 560.010041][T12896] REISERFS (device loop4): Using rupasov hash to sort names [ 560.017956][T12896] REISERFS (device loop4): using 3.5.x disk format [ 560.027802][T12896] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 560.040103][T12896] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 560.051704][T12896] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 560.063158][T12896] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 560.819207][T12912] loop0: detected capacity change from 0 to 512 [ 560.929453][T12912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 560.948945][T12912] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 561.251990][ T27] kauditd_printk_skb: 306 callbacks suppressed [ 561.252006][ T27] audit: type=1326 audit(1781017225.158:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.1.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f522739ce59 code=0x0 [ 561.359562][T12927] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2249'. [ 562.046727][ T7917] EXT4-fs (loop0): unmounting filesystem. [ 562.757870][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.764332][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.340008][T13006] loop0: detected capacity change from 0 to 128 [ 564.650363][T13013] loop4: detected capacity change from 0 to 2048 [ 564.730971][T13013] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 564.772199][ T4834] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 564.840755][T13013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.985741][ T4834] usb 8-1: unable to get BOS descriptor or descriptor too short [ 565.005425][ T4834] usb 8-1: config 0 has no interfaces? [ 565.036018][ T4834] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 565.077176][ T4834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.111048][ T4834] usb 8-1: Product: syz [ 565.125525][ T4834] usb 8-1: Manufacturer: syz [ 565.152092][ T4834] usb 8-1: SerialNumber: syz [ 565.182503][ T4834] usb 8-1: config 0 descriptor?? [ 565.459408][T13024] loop1: detected capacity change from 0 to 128 [ 565.501105][T13024] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 565.563380][T13024] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 565.581317][ T4834] usb 8-1: USB disconnect, device number 15 [ 565.863779][T13031] loop2: detected capacity change from 0 to 7 [ 565.907644][T13031] loop2: [ 565.910877][T13031] loop2: partition table partially beyond EOD, truncated [ 565.918034][T13035] loop4: detected capacity change from 0 to 128 [ 565.925557][T13035] EXT4-fs: inline encryption not supported [ 565.964644][T13035] EXT4-fs (loop4): Test dummy encryption mode enabled [ 566.039624][T13035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 566.089947][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2280'. [ 566.125532][T13035] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.335569][T13043] device macvlan2 entered promiscuous mode [ 566.353933][T13043] device bond3 entered promiscuous mode [ 566.360111][T13043] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 566.399509][T13043] device bond3 left promiscuous mode [ 566.678613][T11781] EXT4-fs (loop4): unmounting filesystem. [ 566.785676][T13062] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 568.432320][ T4277] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 568.441561][ T4277] Bluetooth: hci5: Injecting HCI hardware error event [ 568.454649][ T48] Bluetooth: hci5: hardware error 0x00 [ 569.626150][T13118] netlink: 'syz.7.2300': attribute type 1 has an invalid length. [ 569.747193][T13118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 569.831373][T13124] device veth0_virt_wifi entered promiscuous mode [ 569.885093][T13124] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 570.273065][T13118] bond4: (slave veth0_virt_wifi): Releasing active interface [ 570.512426][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 571.858760][T13139] loop4: detected capacity change from 0 to 64 [ 572.383652][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 572.389729][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 572.403892][T13155] ceph: No mds server is up or the cluster is laggy [ 572.585036][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.599990][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 572.608822][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 572.630770][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.659657][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 572.667657][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 574.124834][T13194] loop6: detected capacity change from 0 to 8192 [ 574.229641][T13194] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 574.242903][T13194] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 574.252517][T13194] REISERFS (device loop6): using ordered data mode [ 574.259105][T13194] reiserfs: using flush barriers [ 574.282105][T13194] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 574.301847][T13194] REISERFS (device loop6): checking transaction log (loop6) [ 574.318725][T13194] REISERFS (device loop6): Using rupasov hash to sort names [ 574.326304][T13194] REISERFS (device loop6): using 3.5.x disk format [ 574.334772][T13194] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 574.346172][T13194] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 574.357986][T13194] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 574.369305][T13194] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 574.764797][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 575.077370][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 575.096518][T13160] chnl_net:caif_netlink_parms(): no params data found [ 576.146988][T13212] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.154548][T13212] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.703899][T13212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.760600][T13212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.832288][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 577.256568][T13212] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.266920][T13212] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.278586][T13212] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.288420][T13212] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.540135][T13240] netlink: 'syz.4.2328': attribute type 12 has an invalid length. [ 577.915553][T13160] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.928056][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.955311][T13160] device bridge_slave_0 entered promiscuous mode [ 578.627733][T13256] loop6: detected capacity change from 0 to 131072 [ 578.702394][T13256] F2FS-fs (loop6): Found nat_bits in checkpoint [ 578.742303][T13256] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 578.852934][ T27] audit: type=1804 audit(1781017242.758:400): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2332" name="/newroot/132/file1/bus" dev="loop6" ino=10 res=1 errno=0 [ 578.912124][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 579.042824][T13160] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.050088][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.189615][T13160] device bridge_slave_1 entered promiscuous mode [ 579.384986][T13160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.433500][T13160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.628422][T13277] loop4: detected capacity change from 0 to 512 [ 579.693189][T13277] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 579.753383][T13277] EXT4-fs (loop4): 1 truncate cleaned up [ 579.759229][T13277] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 579.895125][T13277] loop4: detected capacity change from 512 to 0 [ 579.917348][ C1] I/O error, dev loop4, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 579.927025][T13282] EXT4-fs error (device loop4): ext4_get_inode_loc:4658: inode #18: block 9: comm syz.4.2337: unable to read itable block [ 579.971683][ C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 579.995542][ T4618] lo_write_bvec: 14 callbacks suppressed [ 579.995559][ T4618] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.012796][ C1] I/O error, dev loop4, sector 70 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 580.043495][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 580.053126][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 580.062638][ C1] buffer_io_error: 14 callbacks suppressed [ 580.062651][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.076954][T13282] EXT4-fs (loop4): I/O error while writing superblock [ 580.101994][T13160] team0: Port device team_slave_0 added [ 580.118193][T13282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: IO failure [ 580.130577][T13160] team0: Port device team_slave_1 added [ 580.152259][ T6804] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.160412][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 580.170010][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 580.179521][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.187914][T13282] EXT4-fs (loop4): I/O error while writing superblock [ 580.226798][T13282] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.2337: mark_inode_dirty error [ 580.255213][T13160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.290830][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.322220][T12210] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.330378][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 580.339964][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 580.349469][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.363492][T13282] EXT4-fs (loop4): I/O error while writing superblock [ 580.389230][ C1] I/O error, dev loop4, sector 70 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 580.398983][T13160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.467558][T11781] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 580.496856][T11781] EXT4-fs error (device loop4): ext4_get_inode_loc:4658: inode #2: block 5: comm syz-executor: unable to read itable block [ 580.525556][T10676] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.534671][T13160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.541658][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.572098][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.580382][T13160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.590978][T11781] EXT4-fs (loop4): I/O error while writing superblock [ 580.623228][T11781] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: IO failure [ 580.635856][T12210] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.654784][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.663394][T11781] EXT4-fs (loop4): I/O error while writing superblock [ 580.676385][T11781] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 580.699050][T12210] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.707537][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.715925][T11781] EXT4-fs (loop4): I/O error while writing superblock [ 580.778122][T12210] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4643: inode #18: block 9: comm kworker/u4:36: unable to read itable block [ 580.798510][T10676] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.811472][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.820155][T12210] EXT4-fs (loop4): I/O error while writing superblock [ 580.832283][T12210] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4643: inode #2: block 5: comm kworker/u4:36: unable to read itable block [ 580.862427][ T4618] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.871211][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.879629][T12210] EXT4-fs (loop4): I/O error while writing superblock [ 580.889182][T11781] EXT4-fs (loop4): unmounting filesystem. [ 580.928265][T12210] loop: Write error at byte offset 9223372036854776831, length 1024. [ 580.936688][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 580.992192][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 581.046336][ T6805] device hsr_slave_0 left promiscuous mode [ 581.090484][ T6805] device hsr_slave_1 left promiscuous mode [ 581.108384][ T6805] device bridge_slave_1 left promiscuous mode [ 581.132340][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.143059][ T6805] device bridge_slave_0 left promiscuous mode [ 581.149864][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.326094][ T6805] bond0 (unregistering): (slave veth7): Releasing active interface [ 581.352437][ T6805] bond0 (unregistering): (slave veth7): the permanent HWaddr of slave - ee:18:03:90:8f:c7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 581.585329][ T6805] bond0 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 581.595473][ T6805] bond0 (unregistering): Released all slaves [ 582.268825][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 582.329953][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 582.941727][T13160] device hsr_slave_0 entered promiscuous mode [ 582.949646][T13160] device hsr_slave_1 entered promiscuous mode [ 582.980942][T13160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.996825][T13160] Cannot create hsr debugfs directory [ 583.035890][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 584.158293][T13319] loop7: detected capacity change from 0 to 512 [ 584.222207][T13319] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 584.320498][T13319] EXT4-fs (loop7): 1 truncate cleaned up [ 584.328499][T13319] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 584.420718][T13160] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 584.446780][T13160] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 584.473382][T13319] loop7: detected capacity change from 512 to 0 [ 584.484086][T13160] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 584.526294][T13327] EXT4-fs error (device loop7): ext4_get_inode_loc:4658: inode #18: block 9: comm syz.7.2351: unable to read itable block [ 584.542766][T13322] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2352'. [ 584.569241][T13160] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 584.577297][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 584.586542][ T6805] loop: Write error at byte offset 9223372036854776831, length 1024. [ 584.596821][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 584.605750][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 584.615703][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 584.618261][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 584.631031][T13327] EXT4-fs (loop7): I/O error while writing superblock [ 584.638690][T13327] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: IO failure [ 584.650486][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 584.660226][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 584.691574][T13327] EXT4-fs (loop7): I/O error while writing superblock [ 584.717270][T13310] mmap: syz.1.2350 (13310) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 584.724146][T13327] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #18: comm syz.7.2351: mark_inode_dirty error [ 584.773341][T13327] EXT4-fs (loop7): I/O error while writing superblock [ 585.003231][ C0] blk_print_req_error: 29 callbacks suppressed [ 585.003248][ C0] I/O error, dev loop7, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 585.019428][ T5708] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 585.078222][ C0] I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 585.089132][ T5708] EXT4-fs error (device loop7): ext4_get_inode_loc:4658: inode #2: block 5: comm syz-executor: unable to read itable block [ 585.112060][ C0] I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 585.122135][T13160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.142847][ T6805] lo_write_bvec: 2 callbacks suppressed [ 585.142861][ T6805] loop: Write error at byte offset 9223372036854776831, length 1024. [ 585.179513][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.190367][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 585.199989][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 585.205340][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.209479][ C0] buffer_io_error: 2 callbacks suppressed [ 585.209505][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 585.231171][ T5708] EXT4-fs (loop7): I/O error while writing superblock [ 585.240563][T13160] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.244829][ T5708] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: IO failure [ 585.256559][ T6805] loop: Write error at byte offset 9223372036854776831, length 1024. [ 585.265211][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 585.274779][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 585.284284][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 585.294254][ T5708] EXT4-fs (loop7): I/O error while writing superblock [ 585.301069][ T5708] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 585.332426][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 585.342327][ T6666] loop: Write error at byte offset 9223372036854776831, length 1024. [ 585.354177][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.363010][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 585.372592][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 585.382099][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 585.391262][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.398427][T10676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.403009][ T5708] EXT4-fs (loop7): I/O error while writing superblock [ 585.479591][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 585.491320][ C1] I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 585.506748][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 585.516540][ T4444] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4643: inode #18: block 9: comm kworker/u4:8: unable to read itable block [ 585.544092][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.552777][T10676] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.559914][T10676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.568297][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 585.578286][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.583476][ T4618] loop: Write error at byte offset 9223372036854776831, length 1024. [ 585.607306][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 585.627350][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.632629][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 585.643890][ T4444] EXT4-fs (loop7): I/O error while writing superblock [ 585.663078][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.683706][ T4444] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4643: inode #2: block 5: comm kworker/u4:8: unable to read itable block [ 585.710089][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.720507][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.728682][ T6805] loop: Write error at byte offset 9223372036854776831, length 1024. [ 585.737406][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 585.745799][ T4444] EXT4-fs (loop7): I/O error while writing superblock [ 585.763162][ T5708] EXT4-fs (loop7): unmounting filesystem. [ 585.769932][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.778672][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.798240][ T6804] loop: Write error at byte offset 9223372036854776831, length 1024. [ 585.824049][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 585.854372][T13160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.908232][T13160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.938975][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.963386][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.056257][T13329] chnl_net:caif_netlink_parms(): no params data found [ 586.404150][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.421562][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.468095][T13329] device bridge_slave_0 entered promiscuous mode [ 586.478483][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.502261][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.510612][T13329] device bridge_slave_1 entered promiscuous mode [ 586.589482][T13362] loop6: detected capacity change from 0 to 1024 [ 586.606185][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.671175][T13362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 586.678644][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.752149][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 586.784678][T13362] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 586.844056][T13329] team0: Port device team_slave_0 added [ 586.852867][T13329] team0: Port device team_slave_1 added [ 586.876110][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.883862][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.916125][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.932700][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.939692][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.988904][T10570] EXT4-fs (loop6): unmounting filesystem. [ 587.092051][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.140399][T13373] loop6: detected capacity change from 0 to 512 [ 587.174194][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 587.181746][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 587.246439][T13160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.329918][T13329] device hsr_slave_0 entered promiscuous mode [ 587.365538][T13329] device hsr_slave_1 entered promiscuous mode [ 587.414396][T13329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.431988][T13329] Cannot create hsr debugfs directory [ 587.496092][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.507515][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.515855][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.537008][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.544770][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 587.553049][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.243865][T13401] tipc: Enabled bearer , priority 0 [ 588.403683][T13399] tipc: Resetting bearer [ 588.614939][ T4618] tipc: Resetting bearer [ 588.695031][T13380] chnl_net:caif_netlink_parms(): no params data found [ 588.711351][T13398] tipc: Resetting bearer [ 588.837757][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 589.642612][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 590.922109][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 591.739434][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 592.058865][T13398] tipc: Disabling bearer [ 592.160137][T13433] netlink: 'syz.1.2379': attribute type 2 has an invalid length. [ 592.493317][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 592.513945][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 592.589947][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.619381][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.659694][T13380] device bridge_slave_0 entered promiscuous mode [ 592.685351][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.698384][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.709504][T13380] device bridge_slave_1 entered promiscuous mode [ 592.746211][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 592.770212][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 592.790085][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 592.801820][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.822669][T13160] device veth0_vlan entered promiscuous mode [ 592.963786][T13380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.979002][T13160] device veth1_vlan entered promiscuous mode [ 592.992182][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 593.001397][T13380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.116520][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 593.132922][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 593.195356][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 593.205620][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.237379][T13160] device veth0_macvtap entered promiscuous mode [ 593.265948][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 593.281903][T13380] team0: Port device team_slave_0 added [ 593.306938][T13160] device veth1_macvtap entered promiscuous mode [ 593.336147][T13380] team0: Port device team_slave_1 added [ 593.368057][T13329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 593.408026][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.451041][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.479073][T13160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.511731][T13329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 593.539129][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 593.569205][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 593.595375][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.611733][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.624543][T13160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.632553][T13380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.652519][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.689234][T13380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.702847][T13329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 593.714039][T13329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 593.725454][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 593.742890][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 593.760124][T13160] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.774246][T13160] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.788315][T13160] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.797207][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 593.813275][T13160] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.843403][T13380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.850398][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.899058][T13380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.143671][T13380] device hsr_slave_0 entered promiscuous mode [ 594.161554][T13380] device hsr_slave_1 entered promiscuous mode [ 594.169882][T13380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.177925][T13380] Cannot create hsr debugfs directory [ 594.210866][ T4618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.249857][ T27] audit: type=1326 audit(1781017258.158:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.1.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522739ce59 code=0x0 [ 594.262196][ T4618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.273543][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.314780][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.343712][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 594.376189][T10676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.395405][T10676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.405837][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 594.420176][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 594.430544][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 594.445757][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.477760][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 594.502912][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 594.530100][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.537337][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.546603][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.617092][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 594.629276][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.658160][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.665382][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.683926][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 594.723123][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 594.746485][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 594.766755][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.789479][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.828178][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 594.879898][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.899817][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 594.933584][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.955000][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 594.967962][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.997318][T13329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 595.872082][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 596.280541][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 596.312697][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 596.337801][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.403613][T13380] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 596.433210][T13380] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 596.482013][T13380] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 596.525946][T13380] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 596.618383][ T6666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 596.635792][ T6666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 596.713280][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 596.736623][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 596.771734][T13329] device veth0_vlan entered promiscuous mode [ 596.782884][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.811344][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 596.847858][T13329] device veth1_vlan entered promiscuous mode [ 596.920798][T13380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.951847][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 596.967075][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 596.986519][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 597.006607][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 597.030824][T13329] device veth0_macvtap entered promiscuous mode [ 597.074541][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 597.096821][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.125462][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.157751][T13329] device veth1_macvtap entered promiscuous mode [ 597.184783][T13380] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.234459][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 597.264190][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.283120][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.314111][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.321310][T10676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.362351][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.390012][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.414576][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.431233][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.450107][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.464494][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.494109][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.520909][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.539949][T10676] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.547141][T10676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.567476][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.580788][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 597.599394][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 597.614498][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.639060][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.659349][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.677739][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.710963][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.761484][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.777543][T13329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.801973][T13329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.810740][T13329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.838789][T13329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.892624][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 597.924046][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 597.973589][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.018901][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.062793][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.085880][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.095528][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.119924][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.131252][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.209875][T13380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.222636][T13380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.242525][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.259087][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.467502][ T6666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.520834][ T6666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.557690][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 598.602432][ T6804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.610326][ T6804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.662472][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 598.996588][T13575] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2414'. [ 599.068711][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.076360][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.180819][T13577] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2414'. [ 599.232293][T13577] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.239528][T13577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.247036][T13577] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.254221][T13577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.371834][T13577] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2414'. [ 599.400642][T13577] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.408004][T13577] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.463067][T13584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.522902][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.533672][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.594401][T13380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.612808][T13590] loop6: detected capacity change from 0 to 256 [ 599.721154][T13593] loop3: detected capacity change from 0 to 256 [ 600.016827][T13600] vivid-002: disconnect [ 600.259914][T13602] vivid-002: reconnect [ 600.496928][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2427'. [ 601.476301][T13380] device veth0_vlan entered promiscuous mode [ 601.522026][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 601.579795][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 601.609143][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 601.693899][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 601.795274][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 601.922407][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.979636][T13380] device veth1_vlan entered promiscuous mode [ 602.127737][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.153962][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.182851][T13380] device veth0_macvtap entered promiscuous mode [ 602.242669][T13380] device veth1_macvtap entered promiscuous mode [ 602.329206][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.370547][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.418170][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.461508][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.491591][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.526512][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.580904][T13380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.604199][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.619117][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 602.673231][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 602.710558][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.754787][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.782615][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.812092][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.850296][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.893004][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.919544][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.959532][T13380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.981704][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.996268][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.031270][T13380] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.054493][T13380] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.077738][T13380] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.097250][T13380] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.715021][ T6805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.737934][ T6805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.889289][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.933801][T13689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2448'. [ 603.957717][ T6805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.996943][ T6805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.036347][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2448'. [ 604.152803][ T6666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.166453][ T6666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.218237][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.256609][T13699] netlink: 'syz.6.2450': attribute type 12 has an invalid length. [ 604.435446][ T6666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.475194][ T6666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.777055][ T6666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.838717][ T6666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.900434][T13714] loop8: detected capacity change from 0 to 1024 [ 604.966769][T13714] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 604.981183][T13720] loop3: detected capacity change from 0 to 128 [ 605.054252][T13720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 605.071506][T13714] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 605.096183][T13720] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 605.118647][T13714] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 605.264355][T13714] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 605.287801][T13714] EXT4-fs (loop8): This should not happen!! Data will be lost [ 605.287801][T13714] [ 605.329110][T13726] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 605.410762][T13714] EXT4-fs (loop8): Total free blocks count 0 [ 605.439342][T13726] EXT4-fs (loop8): This should not happen!! Data will be lost [ 605.439342][T13726] [ 605.480934][T13714] EXT4-fs (loop8): Free/Dirty block details [ 605.501313][T13714] EXT4-fs (loop8): free_blocks=20480 [ 605.536839][T13726] EXT4-fs (loop8): Total free blocks count 0 [ 605.555856][T13714] EXT4-fs (loop8): dirty_blocks=32 [ 606.026532][T13329] EXT4-fs (loop3): unmounting filesystem. [ 606.156206][ T6666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.195001][ T6666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.350063][T13750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 606.358424][T13750] IPv6: NLM_F_CREATE should be set when creating new route [ 607.496499][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.503973][T13754] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.675955][T13754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.763647][T13754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.515605][T13754] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.524917][T13754] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.536513][T13754] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.546117][T13754] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.062738][T13808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2485'. [ 610.077166][T13809] loop6: detected capacity change from 0 to 256 [ 610.137503][T13809] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 611.307091][ T48] Bluetooth: hci2: hcon ffff8880731f6000 sent 1 < count 16 [ 611.642381][T13852] kvm: MONITOR instruction emulated as NOP! [ 612.013171][T13838] loop6: detected capacity change from 0 to 32768 [ 612.396299][T13873] loop9: detected capacity change from 0 to 512 [ 612.433221][T13873] EXT4-fs (loop9): Test dummy encryption mode enabled [ 612.451259][T13873] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 612.503717][T13873] EXT4-fs error (device loop9): ext4_orphan_get:1431: comm syz.9.2502: bad orphan inode 131083 [ 612.514965][T13873] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 612.667413][T13160] EXT4-fs (loop9): unmounting filesystem. [ 613.849674][ T6666] device hsr_slave_0 left promiscuous mode [ 613.869325][ T6666] device hsr_slave_1 left promiscuous mode [ 613.889662][ T6666] batman_adv: batadv0: Interface deactivated: dummy0 [ 613.917231][ T6666] batman_adv: batadv0: Removing interface: dummy0 [ 613.976387][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.997054][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.034057][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.065899][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.099469][ T6666] device bridge_slave_1 left promiscuous mode [ 614.131702][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.153900][ T6666] device bridge_slave_0 left promiscuous mode [ 614.160384][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.301126][ T6666] device veth1_macvtap left promiscuous mode [ 614.329409][ T6666] device veth0_macvtap left promiscuous mode [ 614.338653][ T6666] device veth1_vlan left promiscuous mode [ 614.364605][ T6666] device veth0_vlan left promiscuous mode [ 614.863621][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 615.062070][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 615.072258][ T14] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 615.081358][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.092589][ T14] usb 7-1: Product: syz [ 615.096809][ T14] usb 7-1: Manufacturer: syz [ 615.101585][ T14] usb 7-1: SerialNumber: syz [ 615.141765][ T14] usb 7-1: config 0 descriptor?? [ 615.150491][ T6666] bond1 (unregistering): (slave bond2): Releasing backup interface [ 615.171564][ T6666] bond2 (unregistering): Released all slaves [ 615.181822][T13941] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 615.317095][T13944] overlayfs: upper fs does not support file handles, falling back to index=off. [ 615.355774][ T14] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 615.722701][ T6666] bond1 (unregistering): Released all slaves [ 616.569019][T13961] overlayfs: workdir and upperdir must reside under the same mount [ 616.800159][ T14] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 616.816154][ T14] usb 7-1: USB disconnect, device number 5 [ 618.757439][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 619.009518][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 619.177107][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.410188][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.359949][ T6666] bond0 (unregistering): Released all slaves [ 620.491323][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 620.605528][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.737243][T13971] device bridge_slave_1 left promiscuous mode [ 620.743845][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.549066][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 621.562662][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 621.574513][T14008] ceph: No mds server is up or the cluster is laggy [ 621.864109][ T22] libceph: connect (1)[c::]:6789 error -101 [ 621.870338][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 621.904074][T14021] fuse: Bad value for 'fd' [ 622.105623][T14023] loop9: detected capacity change from 0 to 512 [ 622.218551][T14026] loop6: detected capacity change from 0 to 2048 [ 622.409038][T14026] NILFS (loop6): invalid segment: Magic number mismatch [ 622.435814][T14026] NILFS (loop6): trying rollback from an earlier position [ 622.562132][T14026] NILFS (loop6): recovery complete [ 622.600408][T14042] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 622.696371][T14026] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 622.863648][ T4289] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 623.053865][ T4289] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.081766][ T4289] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.128254][ T4289] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.182046][ T4289] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.203946][ T4289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.217909][ T4289] usb 10-1: config 0 descriptor?? [ 623.340462][T14057] loop6: detected capacity change from 0 to 512 [ 623.362290][T14057] ext4: Unknown parameter 'noacl' [ 623.664505][ T4289] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 623.686273][ T4289] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 624.196099][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.203098][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.014995][ C1] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 625.391826][T14091] loop6: detected capacity change from 0 to 1024 [ 625.521108][T14091] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 625.817901][T10570] EXT4-fs (loop6): unmounting filesystem. [ 625.956470][T14101] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 625.967986][ T4289] usb 10-1: USB disconnect, device number 3 [ 626.460665][T14127] loop8: detected capacity change from 0 to 256 [ 626.513886][T14124] loop9: detected capacity change from 0 to 1024 [ 626.545166][T13810] blk_print_req_error: 9 callbacks suppressed [ 626.545184][T13810] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 626.648961][T14124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 626.766990][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2572'. [ 626.872675][T14130] device bridge_slave_0 left promiscuous mode [ 626.879014][T14130] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.702062][T14180] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2584'. [ 628.711261][T14180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2584'. [ 628.910174][T14183] loop8: detected capacity change from 0 to 256 [ 629.025287][T14183] FAT-fs (loop8): Directory bread(block 64) failed [ 629.032150][T14183] FAT-fs (loop8): Directory bread(block 65) failed [ 629.039091][T14183] FAT-fs (loop8): Directory bread(block 66) failed [ 629.045931][T14183] FAT-fs (loop8): Directory bread(block 67) failed [ 629.052986][T14183] FAT-fs (loop8): Directory bread(block 68) failed [ 629.059637][T14183] FAT-fs (loop8): Directory bread(block 69) failed [ 629.066570][T14183] FAT-fs (loop8): Directory bread(block 70) failed [ 629.073298][T14183] FAT-fs (loop8): Directory bread(block 71) failed [ 629.080150][T14183] FAT-fs (loop8): Directory bread(block 72) failed [ 629.086879][T14183] FAT-fs (loop8): Directory bread(block 73) failed [ 629.255020][ T27] audit: type=1800 audit(1781017293.168:402): pid=14183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2585" name="file1" dev="loop8" ino=1048721 res=0 errno=0 [ 632.639930][T14256] loop6: detected capacity change from 0 to 512 [ 632.672880][T14256] EXT4-fs: Ignoring removed i_version option [ 632.792280][T14256] EXT4-fs: Ignoring removed oldalloc option [ 633.039316][T14256] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 633.699246][T10570] EXT4-fs (loop6): unmounting filesystem. [ 633.951520][T14242] loop3: detected capacity change from 0 to 32768 [ 634.370323][T14278] netlink: 'syz.1.2613': attribute type 10 has an invalid length. [ 634.466299][T14278] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 634.563338][T14284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2613'. [ 634.646789][T14284] device bridge_slave_1 left promiscuous mode [ 634.686996][T14284] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.822458][T14284] device bridge_slave_0 left promiscuous mode [ 634.833776][T14284] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.862217][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 635.053955][ T14] usb 4-1: config 0 has no interfaces? [ 635.059530][ T14] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 635.095196][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.104025][T14284] bond0: (slave bridge0): Releasing backup interface [ 635.127067][ T14] usb 4-1: config 0 descriptor?? [ 635.409513][T14290] netlink: 'syz.3.2617': attribute type 1 has an invalid length. [ 635.594366][T14290] device bond1 entered promiscuous mode [ 635.600256][T14290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.653521][T14288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.660597][T14288] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 635.684390][T14288] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 635.728543][T14288] bond1: (slave vti0): making interface the new active one [ 635.762087][T14288] device vti0 entered promiscuous mode [ 635.774615][T14288] bond1: (slave vti0): Enslaving as an active interface with an up link [ 635.803115][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 635.871557][ T4325] usb 4-1: USB disconnect, device number 10 [ 635.952054][ T48] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 635.960960][ T48] Bluetooth: hci0: Injecting HCI hardware error event [ 635.973744][ T4277] Bluetooth: hci0: hardware error 0x00 [ 636.580235][T14335] loop6: detected capacity change from 0 to 256 [ 636.744762][T14335] FAT-fs (loop6): Directory bread(block 64) failed [ 636.751443][T14335] FAT-fs (loop6): Directory bread(block 65) failed [ 636.758583][T14335] FAT-fs (loop6): Directory bread(block 66) failed [ 636.765444][T14335] FAT-fs (loop6): Directory bread(block 67) failed [ 636.772314][T14335] FAT-fs (loop6): Directory bread(block 68) failed [ 636.779001][T14335] FAT-fs (loop6): Directory bread(block 69) failed [ 636.785949][T14335] FAT-fs (loop6): Directory bread(block 70) failed [ 636.792638][T14335] FAT-fs (loop6): Directory bread(block 71) failed [ 636.799573][T14335] FAT-fs (loop6): Directory bread(block 72) failed [ 636.806356][T14335] FAT-fs (loop6): Directory bread(block 73) failed [ 636.967316][ T27] audit: type=1800 audit(1781017300.878:403): pid=14335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2628" name="file1" dev="loop6" ino=1048722 res=0 errno=0 [ 638.113269][ T4277] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 638.840833][T14357] netlink: 'syz.1.2634': attribute type 11 has an invalid length. [ 639.661241][T14344] autofs4:pid:14344:autofs_fill_super: could not open pipe file descriptor [ 639.688817][T14346] syz.6.2632 (14346): drop_caches: 2 [ 639.954942][T14374] loop6: detected capacity change from 0 to 16 [ 639.993708][T14374] erofs: (device loop6): mounted with root inode @ nid 36. [ 640.046128][T14374] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 640.110438][T14374] syz.6.2638: attempt to access beyond end of device [ 640.110438][T14374] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 640.232202][T14374] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 640.279502][T14382] device bond1 entered promiscuous mode [ 640.295896][T14374] syz.6.2638: attempt to access beyond end of device [ 640.295896][T14374] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 640.357347][T14374] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 640.484079][ T27] audit: type=1800 audit(1781017304.398:404): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2638" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 642.022081][ T3912] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 642.102730][T14427] loop8: detected capacity change from 0 to 1024 [ 642.140769][T14427] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 642.176288][T14427] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 642.232133][ T3912] usb 7-1: Using ep0 maxpacket: 32 [ 642.241217][ T3912] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 642.257469][T14427] netlink: 452 bytes leftover after parsing attributes in process `syz.8.2650'. [ 642.276023][T14439] loop3: detected capacity change from 0 to 512 [ 642.302672][ T3912] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 642.383648][ T3912] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 642.400826][T14439] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2652: invalid indirect mapped block 4294967295 (level 1) [ 642.488558][ T3912] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 642.504237][T14439] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2652: invalid indirect mapped block 4294967295 (level 1) [ 642.541331][T14439] EXT4-fs (loop3): 2 truncates cleaned up [ 642.564137][ T3912] usb 7-1: config 0 interface 0 has no altsetting 0 [ 642.589700][T14439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 642.589820][ T3912] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 642.777145][ T3912] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 642.894926][ T3912] usb 7-1: Product: syz [ 642.939597][ T3912] usb 7-1: Manufacturer: syz [ 642.952500][ T4357] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 643.001605][ T3912] usb 7-1: SerialNumber: syz [ 643.113473][ T3912] usb 7-1: config 0 descriptor?? [ 643.153517][ T4357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.185660][ T4357] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 643.208959][ T3912] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 643.237484][ T4357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.290280][ T4357] usb 4-1: config 0 descriptor?? [ 643.325980][ T4357] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 643.374051][ T3912] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 643.535117][ T4357] usb 4-1: USB disconnect, device number 11 [ 643.632446][ T3912] usb 7-1: USB disconnect, device number 6 [ 643.704112][ T3912] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 644.193693][T13329] EXT4-fs (loop3): unmounting filesystem. [ 644.274952][T14464] device syzkaller1 entered promiscuous mode [ 644.846762][T14475] loop3: detected capacity change from 0 to 512 [ 644.870898][T14475] EXT4-fs: Ignoring removed bh option [ 644.907143][T14475] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 644.992834][ T4277] Bluetooth: hci1: link tx timeout [ 644.999537][ T4277] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 645.130130][T14475] EXT4-fs (loop3): 1 truncate cleaned up [ 646.001991][T14475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 646.414785][T14492] loop6: detected capacity change from 0 to 8192 [ 646.456939][T14492] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 646.480422][T14500] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2666'. [ 646.514750][T13329] EXT4-fs (loop3): unmounting filesystem. [ 646.552228][T14492] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 646.561790][T14492] REISERFS (device loop6): using ordered data mode [ 646.568861][T14492] reiserfs: using flush barriers [ 646.591237][T14492] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 646.629314][T14492] REISERFS (device loop6): checking transaction log (loop6) [ 646.938572][T14492] REISERFS (device loop6): Using tea hash to sort names [ 646.989068][T14492] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 647.072140][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 648.024718][T14535] netlink: 'syz.3.2675': attribute type 1 has an invalid length. [ 648.554296][T14553] dccp_close: ABORT with 76 bytes unread [ 648.613480][T14560] loop6: detected capacity change from 0 to 512 [ 648.620643][T14560] EXT4-fs: Ignoring removed i_version option [ 648.684555][T14560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 648.779280][T14560] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 648.812431][T14560] ext4 filesystem being mounted at /207/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.874556][T14571] loop8: detected capacity change from 0 to 512 [ 648.931727][T14560] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.2681: Unrecognised inode hash code 20 [ 648.944915][T14560] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2681: Corrupt directory, running e2fsck is recommended [ 648.945273][T14571] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.2684: inode has both inline data and extents flags [ 648.962601][T14560] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.2681: path /207/file7: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=2048 fake=1 [ 648.995983][T13810] udevd[13810]: incorrect ext4 checksum on /dev/loop6 [ 649.008737][T14560] EXT4-fs (loop6): Remounting filesystem read-only [ 649.015945][T14560] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 649.026609][T14560] EXT4-fs (loop6): Remounting filesystem read-only [ 649.033562][T14560] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #2: comm syz.6.2681: mark_inode_dirty error [ 649.045744][T14571] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2684: couldn't read orphan inode 15 (err -117) [ 649.059718][T14560] EXT4-fs (loop6): Remounting filesystem read-only [ 649.085825][T14571] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 649.822923][T10570] EXT4-fs (loop6): unmounting filesystem. [ 649.829372][T10570] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 649.860629][T10570] EXT4-fs (loop6): Remounting filesystem read-only [ 649.882491][T10570] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 649.957946][T10570] EXT4-fs (loop6): Remounting filesystem read-only [ 649.971502][T13380] EXT4-fs (loop8): unmounting filesystem. [ 649.995108][T10570] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 650.033321][T10570] EXT4-fs (loop6): Remounting filesystem read-only [ 650.070501][T10570] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 650.124398][T14593] overlayfs: failed to clone upperpath [ 650.140928][T10570] EXT4-fs (loop6): Remounting filesystem read-only [ 650.186348][T14597] loop8: detected capacity change from 0 to 256 [ 650.254366][T14597] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 650.325853][T14597] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 650.388189][T14597] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 650.612946][T14606] netlink: 'syz.6.2692': attribute type 10 has an invalid length. [ 650.643715][T14606] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.724472][T14606] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.731657][T14606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.820512][T14606] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 650.843557][T14611] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2692'. [ 650.880230][T14611] device bridge_slave_1 left promiscuous mode [ 650.922133][T14611] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.182299][T14611] bond0: (slave bridge0): Releasing backup interface [ 653.098797][T14657] loop3: detected capacity change from 0 to 1024 [ 653.132276][T14657] EXT4-fs: Ignoring removed bh option [ 653.168427][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 653.182739][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 653.194680][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 653.205326][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 653.213164][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 653.220521][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 653.227415][T14657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 653.380237][T14657] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 653.442956][T14657] EXT4-fs error (device loop3): ext4_ext_tree_init:879: inode #18: comm syz.3.2708: mark_inode_dirty error [ 653.478235][T14657] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 653.516288][T14657] EXT4-fs error (device loop3): __ext4_new_inode:1355: inode #18: comm syz.3.2708: mark_inode_dirty error [ 653.567670][T14657] EXT4-fs error (device loop3) in __ext4_new_inode:1357: Corrupt filesystem [ 653.647174][T14657] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 653.750023][T14657] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #18: comm syz.3.2708: mark_inode_dirty error [ 653.774072][T14657] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 653.805749][T14673] netlink: 'syz.9.2712': attribute type 10 has an invalid length. [ 653.837215][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.844458][T14673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.852078][T14673] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.859279][T14673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.896039][T14673] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 653.909834][T13329] EXT4-fs (loop3): unmounting filesystem. [ 654.055997][T14676] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2712'. [ 654.075639][T14676] device bridge_slave_1 left promiscuous mode [ 654.091085][T14676] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.124009][T14676] device bridge_slave_0 left promiscuous mode [ 654.130549][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.293145][T14676] bond0: (slave bridge0): Releasing backup interface [ 654.460652][T14684] IPv6: sit1: Disabled Multicast RS [ 654.595793][T14658] chnl_net:caif_netlink_parms(): no params data found [ 655.071260][T14658] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.089178][T14658] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.110476][T14658] device bridge_slave_0 entered promiscuous mode [ 655.122819][T14658] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.130164][T14658] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.139053][T14658] device bridge_slave_1 entered promiscuous mode [ 655.236827][T14658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.320439][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 655.431685][T14658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.598226][T14658] team0: Port device team_slave_0 added [ 655.619120][T12209] device hsr_slave_0 left promiscuous mode [ 655.639650][T12209] device hsr_slave_1 left promiscuous mode [ 655.665214][T12209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.692813][T12209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.729045][T12209] device bridge_slave_1 left promiscuous mode [ 655.739640][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.764340][T12209] device bridge_slave_0 left promiscuous mode [ 655.770678][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.882601][T12209] bond1 (unregistering): Released all slaves [ 656.079356][T14731] overlayfs: failed to clone upperpath [ 657.392217][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 657.777521][T12209] team0 (unregistering): Port device team_slave_1 removed [ 657.888993][T12209] team0 (unregistering): Port device team_slave_0 removed [ 657.993352][T12209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.128263][T12209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.729017][T12209] bond0 (unregistering): Released all slaves [ 658.859454][T14658] team0: Port device team_slave_1 added [ 658.889028][T14742] netlink: 'syz.3.2727': attribute type 10 has an invalid length. [ 658.918025][T14742] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.993552][T14742] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.000770][T14742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.012823][T14742] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 659.022301][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2727'. [ 659.033983][T14743] device bridge_slave_0 left promiscuous mode [ 659.040667][T14743] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.119911][T14743] bond0: (slave bridge0): Releasing backup interface [ 659.248732][T14756] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2731'. [ 659.351295][T14658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.381964][T14658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.472000][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 659.491403][T14658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.511104][T14658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.524398][T14658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.568457][T14658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.719882][T14658] device hsr_slave_0 entered promiscuous mode [ 659.734238][T14658] device hsr_slave_1 entered promiscuous mode [ 659.759025][T14658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.783004][T14658] Cannot create hsr debugfs directory [ 661.384588][T14658] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 661.416855][T14658] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 661.459826][T14658] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 661.543011][T14658] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.552361][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 661.880647][T14658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.926822][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.946627][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.990806][T14658] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.163358][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 662.204738][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.229796][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.270775][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.277991][T10672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.327479][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.335986][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.350235][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.359465][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.366676][T10672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.388857][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.398480][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.423064][T14852] kvm: pic: level sensitive irq not supported [ 662.449931][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 662.485033][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.503737][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 662.511393][ T7] usb 7-1: can't read configurations, error -71 [ 662.521645][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.590060][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.614271][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.777469][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.786044][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.795254][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.807590][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.816752][T10672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.854123][T14658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.298058][T14885] loop6: detected capacity change from 0 to 1024 [ 663.486143][T14885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 663.722140][ T4324] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 663.778803][T14885] EXT4-fs error (device loop6) in ext4_setattr:5695: Out of memory [ 663.787733][ T27] audit: type=1804 audit(1781017327.688:405): pid=14885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2769" name="/newroot/220/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 663.894789][T14901] loop9: detected capacity change from 0 to 64 [ 663.924470][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.953387][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.990568][ T4324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.053904][T14901] hfs: request for non-existent node 131072 in B*Tree [ 664.065278][ T4324] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.083814][T14901] hfs: request for non-existent node 131072 in B*Tree [ 664.095842][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.117281][T14901] hfs: request for non-existent node 131072 in B*Tree [ 664.124087][ T4324] usb 4-1: config 0 descriptor?? [ 664.141089][T10570] EXT4-fs (loop6): unmounting filesystem. [ 664.149475][T14901] hfs: request for non-existent node 131072 in B*Tree [ 664.255387][T14905] hfs: request for non-existent node 131072 in B*Tree [ 664.266889][T14905] hfs: request for non-existent node 131072 in B*Tree [ 664.287253][T14906] hfs: request for non-existent node 131072 in B*Tree [ 664.309733][T14903] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2773'. [ 664.326610][T14906] hfs: request for non-existent node 131072 in B*Tree [ 664.341857][T14901] hfs: request for non-existent node 131072 in B*Tree [ 664.358371][T14901] hfs: request for non-existent node 131072 in B*Tree [ 664.421136][T14905] hfs: request for non-existent node 131072 in B*Tree [ 664.435515][T14905] hfs: request for non-existent node 131072 in B*Tree [ 664.481202][T14901] hfs: request for non-existent node 12 in B*Tree [ 664.510998][T14901] hfs: request for non-existent node 12 in B*Tree [ 664.625551][ T4324] usbhid 4-1:0.0: can't add hid device: -71 [ 664.633275][ T4324] usbhid: probe of 4-1:0.0 failed with error -71 [ 664.662429][ T4324] usb 4-1: USB disconnect, device number 12 [ 664.777254][T14913] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 665.274396][T14658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.579917][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.589397][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.689320][T12209] device hsr_slave_0 left promiscuous mode [ 665.713613][T12209] device hsr_slave_1 left promiscuous mode [ 665.740362][T12209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.782975][T12209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.835343][T12209] device bridge_slave_1 left promiscuous mode [ 665.841654][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.916728][T12209] device bridge_slave_0 left promiscuous mode [ 665.937467][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.012096][ T22] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 667.203789][ T22] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.232209][ T22] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 667.251322][ T22] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 667.310269][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.380571][T14941] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 667.449296][T12209] team0 (unregistering): Port device team_slave_1 removed [ 667.603750][T12209] team0 (unregistering): Port device team_slave_0 removed [ 667.685167][ T3912] usb 7-1: USB disconnect, device number 9 [ 667.794644][T12209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.873353][T12209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.551729][ T27] audit: type=1800 audit(1781017332.458:406): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2796" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 668.689928][T14974] kvm: pic: non byte write [ 668.811435][T12209] bond0 (unregistering): Released all slaves [ 668.834881][T14978] loop3: detected capacity change from 0 to 8192 [ 668.980773][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 669.005432][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 669.081543][T14940] device vcan1 entered promiscuous mode [ 669.129249][T14658] device veth0_vlan entered promiscuous mode [ 669.162467][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 669.171224][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 669.221911][T14658] device veth1_vlan entered promiscuous mode [ 669.260061][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 669.280268][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 669.313112][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 669.408135][T14658] device veth0_macvtap entered promiscuous mode [ 669.442545][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 669.452760][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 669.519391][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.546683][T14658] device veth1_macvtap entered promiscuous mode [ 669.578450][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 669.597255][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 669.678888][T14658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.711734][T14658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.748358][T14658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.771752][T14991] binder: 14990:14991 ioctl c0306201 200000000080 returned -14 [ 669.779539][T14658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.806315][T14658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.819907][T14991] binder: 14990:14991 ioctl c0306201 2000000003c0 returned -14 [ 669.829648][T14984] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2799'. [ 669.862191][T14978] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 669.876847][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 669.911819][T14978] FAT-fs (loop3): Filesystem has been set read-only [ 669.919142][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 669.966146][T14658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.000948][T14658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.057519][T14658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.092078][T14658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.137637][T14658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.182272][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.193749][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.260265][T14658] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.275607][T14658] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.304855][T14658] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.327618][T14658] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.332201][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.340081][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.387495][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 671.463064][ T4444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.470952][ T4444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.536143][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 671.772095][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 671.954606][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.982011][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.033976][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 672.088218][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 672.155768][ T22] usb 4-1: SerialNumber: syz [ 672.382896][ T22] usb 4-1: 0:2 : does not exist [ 672.472740][ T22] usb 4-1: USB disconnect, device number 13 [ 672.778149][T13810] udevd[13810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.809447][T15049] IPv6: Can't replace route, no match found [ 674.018605][T15073] loop2: detected capacity change from 0 to 2048 [ 674.219189][T15073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 674.248605][T15073] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.208777][T14658] EXT4-fs (loop2): unmounting filesystem. [ 675.412551][T15095] netlink: 'syz.1.2828': attribute type 1 has an invalid length. [ 675.478961][T15105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2828'. [ 675.641481][T15105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 675.757361][T15097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 675.765878][T15097] bond2: (slave bond3): making interface the new active one [ 675.774222][T15097] bond2: (slave bond3): Enslaving as an active interface with an up link [ 675.790831][T15100] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 676.300098][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 676.633986][T15121] loop9: detected capacity change from 0 to 2048 [ 676.678509][T15121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.105866][T12209] device hsr_slave_0 left promiscuous mode [ 677.127968][T12209] device hsr_slave_1 left promiscuous mode [ 677.163211][T12209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.172673][T12209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.285954][T12209] device bridge_slave_1 left promiscuous mode [ 677.306290][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.343683][T12209] device bridge_slave_0 left promiscuous mode [ 677.349989][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.174120][T12209] bond4 (unregistering): Released all slaves [ 678.188572][T12209] bond3 (unregistering): Released all slaves [ 678.603242][T15165] fuse: Bad value for 'fd' [ 678.789840][T12209] bond0 (unregistering): Released all slaves [ 678.806231][T12209] bond1 (unregistering): Released all slaves [ 679.112680][T12209] bond2 (unregistering): Released all slaves [ 680.118209][T12209] team0 (unregistering): Port device team_slave_1 removed [ 680.189525][T12209] team0 (unregistering): Port device team_slave_0 removed [ 680.745186][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2858'. [ 681.130565][T15154] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 681.539777][T15217] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 681.964250][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 684.100928][ T6804] [ 684.103323][ T6804] ============================================ [ 684.109481][ T6804] WARNING: possible recursive locking detected [ 684.115645][ T6804] syzkaller #0 Not tainted [ 684.120070][ T6804] -------------------------------------------- [ 684.126224][ T6804] kworker/u4:13/6804 is trying to acquire lock: [ 684.132474][ T6804] ffffe8ffffd45710 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x62b/0xaa0 [ 684.141822][ T6804] [ 684.141822][ T6804] but task is already holding lock: [ 684.149186][ T6804] ffffe8ffffc45f28 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 684.158408][ T6804] [ 684.158408][ T6804] other info that might help us debug this: [ 684.166481][ T6804] Possible unsafe locking scenario: [ 684.166481][ T6804] [ 684.173941][ T6804] CPU0 [ 684.177234][ T6804] ---- [ 684.180524][ T6804] lock(&pd_list->lock); [ 684.184864][ T6804] lock(&pd_list->lock); [ 684.189213][ T6804] [ 684.189213][ T6804] *** DEADLOCK *** [ 684.189213][ T6804] [ 684.197380][ T6804] May be due to missing lock nesting notation [ 684.197380][ T6804] [ 684.205727][ T6804] 3 locks held by kworker/u4:13/6804: [ 684.211113][ T6804] #0: ffff888141ed4938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 684.222511][ T6804] #1: ffffc900035d7d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 684.233763][ T6804] #2: ffffe8ffffc45f28 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 684.243445][ T6804] [ 684.243445][ T6804] stack backtrace: [ 684.249362][ T6804] CPU: 1 PID: 6804 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 684.256999][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.267075][ T6804] Workqueue: pencrypt_parallel padata_parallel_worker [ 684.273879][ T6804] Call Trace: [ 684.277253][ T6804] [ 684.280228][ T6804] dump_stack_lvl+0x188/0x24e [ 684.284971][ T6804] ? show_regs_print_info+0x12/0x12 [ 684.290222][ T6804] ? load_image+0x400/0x400 [ 684.294754][ T6804] __lock_acquire+0x123e/0x7d10 [ 684.299677][ T6804] ? verify_lock_unused+0x140/0x140 [ 684.304889][ T6804] ? __queue_work+0xbc1/0xfb0 [ 684.309586][ T6804] ? mark_lock+0x94/0x320 [ 684.313932][ T6804] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 684.319930][ T6804] lock_acquire+0x1bb/0x4a0 [ 684.324449][ T6804] ? padata_do_serial+0x62b/0xaa0 [ 684.329488][ T6804] ? queue_work_on+0x196/0x1f0 [ 684.334268][ T6804] ? read_lock_is_recursive+0x10/0x10 [ 684.339659][ T6804] ? wq_worker_last_func+0x40/0x40 [ 684.344788][ T6804] ? __rwlock_init+0x140/0x140 [ 684.349572][ T6804] ? _find_next_bit+0x87/0x130 [ 684.354372][ T6804] _raw_spin_lock+0x2a/0x40 [ 684.359016][ T6804] ? padata_do_serial+0x62b/0xaa0 [ 684.364059][ T6804] padata_do_serial+0x62b/0xaa0 [ 684.368937][ T6804] ? padata_parallel_worker+0x40/0x1c0 [ 684.374408][ T6804] padata_parallel_worker+0x6b/0x1c0 [ 684.379708][ T6804] ? process_one_work+0x7b0/0x1160 [ 684.384831][ T6804] process_one_work+0x8a2/0x1160 [ 684.389794][ T6804] ? worker_detach_from_pool+0x240/0x240 [ 684.395440][ T6804] ? _raw_spin_lock_irq+0xb7/0xf0 [ 684.400486][ T6804] ? _raw_spin_lock_irqsave+0x100/0x100 [ 684.406054][ T6804] ? kthread_data+0x4b/0xc0 [ 684.410668][ T6804] worker_thread+0xaa2/0x1270 [ 684.415368][ T6804] ? __kthread_parkme+0x162/0x1c0 [ 684.420447][ T6804] kthread+0x29d/0x330 [ 684.424521][ T6804] ? worker_clr_flags+0x1a0/0x1a0 [ 684.429587][ T6804] ? kthread_blkcg+0xd0/0xd0 [ 684.434186][ T6804] ret_from_fork+0x1f/0x30 [ 684.438711][ T6804] [ 684.466204][T15270] loop2: detected capacity change from 0 to 256 [ 684.505128][T15270] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 685.634792][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.641175][ T1269] ieee802154 phy1 wpan1: encryption failed: -22