last executing test programs: 7m55.009722333s ago: executing program 32 (id=1281): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = timerfd_create(0x0, 0x800) timerfd_gettime(r4, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r6, 0xfffffe4d}}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000003c0)=ANY=[], 0x49, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 6m36.577907588s ago: executing program 33 (id=1467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x64, r1, 0x7, 0x5, 0x40004, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040884) 5m18.757605477s ago: executing program 34 (id=2177): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000000) 4m7.310665573s ago: executing program 35 (id=2998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000280)="a43b782ece", 0x5}], 0x3) 3m54.262630022s ago: executing program 8 (id=3000): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001080)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@user_xattr}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noinit_itable}, {@nodioread_nolock}]}, 0x4, 0xbce, &(0x7f0000002380)="$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") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) socket$inet6(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m54.015897705s ago: executing program 6 (id=3092): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0046686, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x40, 0x6) memfd_create(0x0, 0x1) fanotify_mark(0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1181, 0x8403}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m53.791723158s ago: executing program 8 (id=3093): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000080)='./control\x00', 0x44) 3m53.235979184s ago: executing program 8 (id=3096): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d4063", @ANYRES64=r0, @ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3m53.136196285s ago: executing program 36 (id=3096): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d4063", @ANYRES64=r0, @ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3m53.024397396s ago: executing program 6 (id=3100): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000280)=@ethtool_stats={0x4c}}) 3m52.875861638s ago: executing program 6 (id=3101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) io_submit(r1, 0x1, &(0x7f0000000280)=[0x0]) shutdown(r0, 0x0) 3m52.782098639s ago: executing program 6 (id=3103): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001080)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@user_xattr}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noinit_itable}, {@nodioread_nolock}]}, 0x4, 0xbce, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRt+22pVLKXUvVinFhrZr2UWmNoXaxaWXHgrttWAhr4zQ+gNJxZWsw6r9B0qScyCXQBKT4EN89iWBQE65JM41JoeACYqVQAiJwuyHpFi70tre3THS7wev5n33nd3neXbYnXlhRwEcWOPZnzTiaERcSiIK9cfTiBis9oYjKrX91tdWpr9aW5lOYmPjH58nkUTEo7WV6cZrJfXt4fpgOCI++HMSP/nfzrgLS8tzU+Vyab4+Prl49cbJhaXl381enbpSulK6durMHyZPT56ZODvZsVq//uT83S9/+ddPK9+8/u3tL158NYnzMVqf215Hp4zH+OZ7sl1/REx1OlhO+ur1bK8z6d/jSWmXkwIAoKV02zXcz6IQfbF18VaIdz7MNTkAAACgIzb6IjYAAACAfS6x/gcAAIB9rvE7gEdrK9ONlu8vEnrr4YWIGKvVv15vtZn+qFS3wzEQEYceJbH9ttak9rRnNh4RDz4++1bWokv3Ie+mshoRP292/JNq/WPVu7h31p9GxEQH4o8/Nn7e6v/tYOv6z3cgft71A3Aw3btQO5HtPP+lm9c/0eT819/k3PU0mp3/Rjrwuu1qXP+t77j+26q/r8X139/bjHHrtZdvtprL6v/j3b+82WhZ/Gz7TEU9gYerEb/ob1Z/sll/0qL+S23GKHx3s9RqLu/6N16JOB7N629Idv//RCdnZsulidrfpjFW35t8o1X8vOvPjv+hFvXvdfxvtBnjXxcv3mk1t3f96WeDyT+rvcH6I/+ZWlycPxUxmPxt5+On6ze0t9DYp/EaWf0nfrX7579Z/VmISv19yNYCq/VtNv7vYzH/dPvW27vVn6398jz+l5/y+P+/zRi/fveFE63mtq9/s5bFf5DU1sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0JBGxGgkaXGzn6bFYsThiPhpHErL1xcWfzNz/d/XLmdzEWMxkM7MlksTEVGojZNsfKra3xqffmz8+4g4EhEvFUaq4+L09fLlvIsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0+GIGI0kLUZEGhHrhTQtFvPOCgAAAOi4sbwTAAAAALrO+h8AAAD2P+t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuzIsXv3k4ionBuptsxgfW4g18yAbkvzTgDITV/eCQC56c87ASA3Tdb4yS67u1yAfWi3D31muOXMUMdzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzovftJRFTOjVRbZrA+N9D0Gcd6mB3QTWneCQC56dttsr93eQC95yMOB1fzNT5wkCR7zA9v7VP54cxQ13ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PkzWm1JWoyItNpP02Ix4kcRMRYDycxsuTQRET+OiI8KA0PZeCjvpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi4haXlualyuTTf/c5w9C6Wjk7nOu/3KFbSg3KG2925jS+PSg++oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KmFpeW5qXK5NL+QdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3haWluemyuXSfBudO0+y87ZO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCf7wMAAP//cN8Ntw==") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) socket$inet6(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m52.057389047s ago: executing program 6 (id=3108): socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x198) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m51.633282182s ago: executing program 6 (id=3112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018dff00"}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3m51.580051423s ago: executing program 0 (id=3113): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open$dir(&(0x7f0000000100)='./file0\x00', 0x6400, 0x100) statfs(&(0x7f0000000140)='./file0\x00', 0x0) 3m51.339534925s ago: executing program 37 (id=3112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018dff00"}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3m51.208769717s ago: executing program 0 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x23) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000001800128008000100736974000c000280080001", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0xe403, r2, 0x4002, 0x70000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80000) 3m50.92362668s ago: executing program 0 (id=3118): add_key$user(0x0, 0x0, &(0x7f0000000280)="674afde9affdbd80bb", 0x9, 0xfffffffffffffffe) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) 3m49.918724082s ago: executing program 0 (id=3127): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001080)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@user_xattr}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noinit_itable}, {@nodioread_nolock}]}, 0x4, 0xbce, &(0x7f0000002380)="$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") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) socket$inet6(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m49.405246698s ago: executing program 0 (id=3131): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=@routing={0x6, 0x0, 0x1, 0x7f}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 3m48.28509018s ago: executing program 0 (id=3141): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open$dir(&(0x7f0000000100)='./file0\x00', 0x6400, 0x100) statfs(&(0x7f0000000140)='./file0\x00', 0x0) 3m48.068176773s ago: executing program 38 (id=3141): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open$dir(&(0x7f0000000100)='./file0\x00', 0x6400, 0x100) statfs(&(0x7f0000000140)='./file0\x00', 0x0) 1m56.995904854s ago: executing program 7 (id=4168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) 1m56.907398675s ago: executing program 7 (id=4170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1m55.913754398s ago: executing program 7 (id=4176): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f00000001c0)) 1m55.75195977s ago: executing program 7 (id=4177): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80040c, &(0x7f0000000440)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYBLOB="3ef628a9ecf9e1751ed9b65d6a5359bd9afb81136cbff69e1bdbcb39d60e9b32d9f142ac189ae0d659610ddf0bf8c95e8f1a51f27bbb9098900d07e5f0303418856a470de86ec769d69ea60f0ea33a2089c2a2d372ec5958bbc02c2b4d00f71d7062876aa812e57f7333fa60a4d976aba0ce610efbc27f6cd9f0eee7074c05c92ae57e5e1b9afed08d27df4b8b9fb9a30a14a0b4a82028df4924d31f4c15fe48e62ddf7437e325ec87679945ecbaeda079054d10574c0036c82e2fbc9d073f4f6644162662a8dc5700d5943d13b93f9868919746c86a6d48", @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc666859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$eJzs3TtsG+cdAPD/USRFuoAjJ36kRYAQNpAWNWpLJpRWXeoWReEhKIJ0aFfClmPBlBxISiEbRaP0sXfI1CkdtAUdinTqYqCdGwQosmoM0CJLJm0q7nhHkRJFUrJeTn4/4+6+u+95/3uRIowL4GvrzvUoP51Il2+speubG832xEZzMs9uR0Q1IkoR5c4ikqXIcm/nU3wz3ZiXT/br54OFubc++3Lz885aOZ+y8qVh9Qao9q78Kpuv51M0ImIiX+5V2afFj3d339fe3X3bG1fS3cM0YNeKwMWfn6lVeGbbe6x38z76TzYfVv0g1y1wRiWd5+YeUxHnIqIW0Xnq53eH0smO7uitn/YAAAAA4KDqB6/ywlZsxVqcP47hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFdV/v7/JJ9KRboRSfH+/2q+LfL0GTT6RYifTnaWT49/MAAAAAAAAABw7F7diq1Yi/PF+naS/eZ/Nba7Rb4R78ZKzMdy3Ii1aMVqrMZyzETEVE9D1bXW6uryTFzN1i4OqXkrPhlQ89b+Y7x9pHsMAAAAAAAAAGdebUT+w8rebb+LOzu//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFmQREx0Ftl0sUhPRakcEbWIqKbl1iM+KdLPiWTQxqcnPw4AAAB4JrX+1aQ2Rp0X3outWIvzxfp2kn3nv5x9X67Fu7EUq7EQq9GO+biXf4dOv/WXNjea7c2N5mLUmovpxn/8bzvTaefHXxxo6FmL0fnbw+CeX85K1ON+LGRbbsTdSKLTZSlv5eXNjWa6XEzHlY2tz/vpmJIf5YaMZqInfS+dXfk4S/+p/68I5QPt4iFM5lEZbCrLrXQjMp2PLa1xoYjA4EiMPDrloT3NRKn7l5+Lw3saHPP3h/d+blepgX+5ORW7I3ErSt0jdHlPJCr9lb/9949++aC99PDB/ZXrZ2eXBnpvZIndkWj2ROLK8HPiuYrEaNNZJC511+/Ez+IXcT2+mHwzlmMhfh2tWI35RpHfys/ndD41PFKf9l39b44aSXpNNrr3r0FjakTfmKIRP81SrbiaHdPzsRBJPIqI+Xg9+3crZrp3g50jfGmMq740xp22x7XvZItumKK+f9m/jtfkUUnjeqEnrr333Kksr3fLTpReHBil4lk3/vOoR/lbeSJt4fdDnw8nbXckZnoi8dLmRrM4i/rOl05I/5J9alhpLz1cftB6Z8z+XsuX6XX0xzP1lEiP8ItRy3fuQjZPsmtqOst7qfuE7Y9XNf/FpaO0J+9St17nSv15PIp7fVfq92M2ZmMuK305K13Z88RK8650W+q/h6d56SetcveHnd7PW4+i3fk89Fz97gPwNXTuu+eq9f/W/13/sP6H+oP6G7WfTP5g8pVqVP5V+WF5euK10ivJ3+LD+O3O938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODwVh4/edhqt+eXBydKg7OS4bVa7e3iRWJDyvQlkvxVOWMUTlYeP9ke2eDwxGQ+vENWP8pE8bbG3qzibYr9hRvHOIxkfffxqo0+FsVbnsboItkT8LTyocdc9LyzpXIGDuXuROOQ1Xv3K08UJ2xP4YOfvfVBx2siIgYVHnHjmHjmWw9wym6uLr5zc+Xxk+8tLLbenn97fqkyOzs3PTf7evPm/YX2/HRn3lPh2F9+C5yU3o8TXdWIeHV03SEvagUAAAAAAAAAAACO0Un8X4jT3kcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+XbnepSfRhIz0zem0/XNjWY7nYr0TslyRJQiIvlNRPLPiNvRmWKqp7lkv34+WJh767MvNz/faatclC9FrO9bbzzr+RSNiJjIl0fV3t3R7VV3kpMDspNuZNKAXSsCB6ft/wEAAP//q/3tgg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 1m55.543697663s ago: executing program 7 (id=4180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xd, &(0x7f0000000200)={0x1, 0x6dda}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1m55.403976935s ago: executing program 7 (id=4181): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1m55.214579518s ago: executing program 39 (id=4181): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1m34.815227514s ago: executing program 2 (id=4311): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m34.677525575s ago: executing program 2 (id=4312): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccefb6719c41902e10c71b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d0dd37ef6d8a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x1, 0x3, 0x401, 0x2, 0x100, 0x101, {0x80, 0x1, 0x108001, 0x1, 0xfffffffffffffff8, 0x4, 0x6, 0x5831, 0x1af, 0x1000, 0x0, r2, r3, 0xff, 0x5}}, {0x1, 0x1, 0x1, 0xfffffff9, '.'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 1m34.628496916s ago: executing program 2 (id=4313): pipe2(&(0x7f0000001b40)={0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tee(r0, r1, 0x5, 0x5) 1m34.525803087s ago: executing program 2 (id=4314): socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) 1m32.290880117s ago: executing program 2 (id=4324): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000080)={"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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 1m30.627938317s ago: executing program 2 (id=4340): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, 0x0, 0x3) 1m30.385004471s ago: executing program 40 (id=4340): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, 0x0, 0x3) 4.334493072s ago: executing program 4 (id=5098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4.047800246s ago: executing program 4 (id=5102): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa10, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa70) 4.027478876s ago: executing program 4 (id=5103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x20008090) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) 3.867947749s ago: executing program 4 (id=5105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 3.78230352s ago: executing program 4 (id=5109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) r1 = gettid() fcntl$setown(r0, 0x8, r1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000001080)=0xa) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='b', 0x1}], 0x1}}], 0x2, 0x404c851) 3.680308891s ago: executing program 4 (id=5111): close(0x3) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) clock_adjtime(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x670, 0x5, 0x3e8, 0x278, 0x350, 0xfeffffff, 0x0, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key=0x3}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x40}, {{0x1, [0x4, 0x7, 0x0, 0x6, 0x2, 0xc], 0x3, 0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x350}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x17f]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x290) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x0, 0x5, 0x7fffffff, 0xffffff81, 0x4]}, &(0x7f00000001c0)=0x54) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 3.175951278s ago: executing program 3 (id=5118): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008090}, 0x8810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.133105848s ago: executing program 3 (id=5120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000980)="e7030500d3fc07000000478880050917da14bc11f40300000000", 0x1a, 0x2404c810, &(0x7f0000000280)={0x11, 0x88a8, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) 3.02795844s ago: executing program 3 (id=5121): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 2.908684521s ago: executing program 3 (id=5125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 2.878522502s ago: executing program 1 (id=5126): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)=0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) epoll_create1(0x0) timer_settime(r0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x9}}, 0x0) 1.398983321s ago: executing program 1 (id=5129): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x808800, &(0x7f0000000500)=ANY=[], 0x0, 0x2bf, &(0x7f0000000640)="$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") 1.310927702s ago: executing program 3 (id=5130): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000009e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0x30) 1.266146863s ago: executing program 3 (id=5131): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/163, 0xa3}, 0x6}], 0x1, 0x12141, 0x0) 1.151972094s ago: executing program 1 (id=5133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 967.977997ms ago: executing program 5 (id=5137): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88), 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10040, 0x0) 848.005018ms ago: executing program 5 (id=5139): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)=0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) epoll_create1(0x0) timer_settime(r0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x9}}, 0x0) 722.33174ms ago: executing program 9 (id=5140): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0xc0000001, 0xfffffff6, 0x1, 0xa94, 0x3, 0x5}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0108000400000000f7ff0a00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef1f16f10ccf40000000500090002000000050002"], 0x58}}, 0x0) 722.09156ms ago: executing program 5 (id=5141): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) lseek(r3, 0x6d, 0x0) 607.604632ms ago: executing program 9 (id=5142): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x0, 0x4f, 0x0, 0x0, 0x1001c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 535.976762ms ago: executing program 5 (id=5143): unshare(0x62040200) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x40, 0x0) 486.188213ms ago: executing program 9 (id=5144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b9}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc403}]}, 0x40}}, 0x200000c0) 363.083815ms ago: executing program 9 (id=5145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f0000000040)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 289.382716ms ago: executing program 1 (id=5146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000200)) 242.720946ms ago: executing program 5 (id=5147): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x3c}}, 0x0) 231.923317ms ago: executing program 9 (id=5148): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}}) 131.946638ms ago: executing program 1 (id=5149): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88), 0x0) sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10040, 0x0) 115.317238ms ago: executing program 5 (id=5150): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$eJzsmb9rFEEUx78zu7e3iaJYaGFzFgEjmL3dPZU0IrGxigiJiOVh1pC4ycndIbmAkPwB/gGCf4dFKgs7OwsrCxWEFF5pIUJGZnfmdm7X9e5csPF9ILPf+fXmvdnZN5ADQRD/LV8+f//04vby+lUAp7GAumo/tvQIG9wY//GlVVPy7e6Z50d5ewyAEFndnrC+A+DNigUcpGaFyGb/EMCCsrkOnmjJfXBcUfoBGDztq8hmR2B4qJq3Dd2ZUyKO2KNOvPF4K458WQSyCGXRAsSY/8NDhg0ArlqCGf73BvtP2jHQTUUcaVETep1CV0645V2pwHb5/iX+rXDcNLaAA2d1v6eevrF/ATgCpVtgWFN6GXV4ntdQ1Sgw4r9oZ/at9LUZ8U8OMhXuLIOri3NLVe3cmjHA34oTUeg6QPUAnb96BbMK+flNHiz9mH0J3ijOcibZcStvHcu3yA961HJhePSuOOvrWMuH1bIlGP7pCZ9KJIkLQKHr/Xwcr2YtOq91e4PzY3YupftzN3/Y9AksPRI4vqOGXDbyk23cCs3+ztNmb7C/tLXT3ow2o90wbN3wr/n+9bAp7x2/mWToP+Q/N8lP84b9WslYhznYa/f73WAP6HeDUT1MSyPjrr3ufBul+eEhx+JPIfT1koStLkqWW4OpP/5KPqVatEqdJwiCIAiCIAiCIAiCIAiCmJI6cApogEH9r/JE/1olCtjhPTybA34FAAD//5X3XDw=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) 73.104549ms ago: executing program 9 (id=5151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xffff9ef9}}]}]}]}, 0x50}}, 0x0) 0s ago: executing program 1 (id=5152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): port 6081 - 0 [ 729.638393][T15015] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.891150][T15332] loop6: detected capacity change from 0 to 8 [ 729.928237][ T4245] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 730.073187][ T26] audit: type=1326 audit(1777905988.371:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15336 comm="syz.5.3087" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1767dd9 code=0x0 [ 730.097324][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.117230][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.133967][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 730.183874][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.198277][ T4245] usb 1-1: Using ep0 maxpacket: 16 [ 730.203185][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.213363][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3087'. [ 730.244262][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 730.338154][ T4245] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.377877][ T4245] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 730.442892][T15351] loop8: detected capacity change from 0 to 4096 [ 730.517756][T15351] EXT4-fs (loop8): Test dummy encryption mode enabled [ 730.557205][T15351] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x0000000000000008,user_xattr,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,noblock_validity,init_itable,journal_dev=0x0000000000000003,noinit_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 730.597486][ T4245] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 730.610285][ T4245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.620832][ T4245] usb 1-1: Product: syz [ 730.625825][ T4245] usb 1-1: Manufacturer: syz [ 730.633684][ T4245] usb 1-1: SerialNumber: syz [ 730.641100][ T4245] usb 1-1: config 0 descriptor?? [ 730.858786][T15363] loop6: detected capacity change from 0 to 4096 [ 730.910654][ T4232] usb 1-1: USB disconnect, device number 24 [ 730.947100][T15363] EXT4-fs (loop6): Test dummy encryption mode enabled [ 731.008751][T15363] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 731.345395][ T4402] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.756114][T15397] loop0: detected capacity change from 0 to 16 [ 731.802074][T15397] erofs: (device loop0): mounted with root inode @ nid 36. [ 731.844797][T15395] attempt to access beyond end of device [ 731.844797][T15395] loop0: rw=524288, want=32, limit=16 [ 731.912804][ T4402] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.930925][T15397] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3099'. [ 731.933280][T15395] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 731.950553][T15395] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 731.960487][T15395] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 731.998045][T15395] attempt to access beyond end of device [ 731.998045][T15395] loop0: rw=524288, want=56, limit=16 [ 732.041187][T15395] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 732.163641][T15407] loop6: detected capacity change from 0 to 4096 [ 732.170901][ T26] audit: type=1800 audit(1777905990.461:35): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3099" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 732.256928][T15415] loop7: detected capacity change from 0 to 1024 [ 732.280085][T15407] EXT4-fs (loop6): Test dummy encryption mode enabled [ 732.364090][T15407] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000008,user_xattr,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,noblock_validity,init_itable,journal_dev=0x0000000000000003,noinit_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 732.406679][T15415] EXT4-fs (loop7): Ignoring removed orlov option [ 732.423740][T15415] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 732.423740][T15415] [ 732.470162][ T4402] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.698251][ T4402] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.818205][T15401] chnl_net:caif_netlink_parms(): no params data found [ 733.318904][T15401] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.326366][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.403066][T15401] device bridge_slave_0 entered promiscuous mode [ 733.507584][T15401] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.538583][T15401] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.581350][T15401] device bridge_slave_1 entered promiscuous mode [ 733.690121][T15401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.740355][T15401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.817222][T15401] team0: Port device team_slave_0 added [ 733.883031][T15401] team0: Port device team_slave_1 added [ 733.948241][ T4245] Bluetooth: hci0: command 0x0409 tx timeout [ 734.013058][T15401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.037199][T15401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.146319][T15401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.212103][T15401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.226633][T15401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.303604][T15401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.499336][T15401] device hsr_slave_0 entered promiscuous mode [ 734.521841][T15401] device hsr_slave_1 entered promiscuous mode [ 734.548813][T15401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.556613][T15401] Cannot create hsr debugfs directory [ 734.718438][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3126'. [ 734.859884][T15463] chnl_net:caif_netlink_parms(): no params data found [ 734.976441][T15499] loop0: detected capacity change from 0 to 4096 [ 734.983253][ T4402] device hsr_slave_0 left promiscuous mode [ 735.000941][ T4402] device hsr_slave_1 left promiscuous mode [ 735.014418][T15506] loop7: detected capacity change from 0 to 1024 [ 735.022100][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.027206][T15499] EXT4-fs (loop0): Test dummy encryption mode enabled [ 735.034606][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.053876][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.071714][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.085646][ T4402] device bridge_slave_1 left promiscuous mode [ 735.098205][T15499] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000008,user_xattr,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,noblock_validity,init_itable,journal_dev=0x0000000000000003,noinit_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 735.116918][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.184904][ T4402] device bridge_slave_0 left promiscuous mode [ 735.191403][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.242484][ T4402] device veth1_macvtap left promiscuous mode [ 735.255680][ T4402] device veth0_macvtap left promiscuous mode [ 735.283172][ T4402] device veth1_vlan left promiscuous mode [ 735.310439][ T4402] device veth0_vlan left promiscuous mode [ 735.697208][ T4402] team0 (unregistering): Port device team_slave_1 removed [ 735.717116][ T4402] team0 (unregistering): Port device team_slave_0 removed [ 735.729592][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.743330][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.825238][ T4402] bond0 (unregistering): Released all slaves [ 735.868602][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 736.028227][ T6041] Bluetooth: hci0: command 0x041b tx timeout [ 736.102482][T15544] virtiofs: Unexpected value for 'dax' [ 736.107891][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3136'. [ 736.218035][T15463] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.225634][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.287701][T15463] device bridge_slave_0 entered promiscuous mode [ 736.317293][T15549] loop7: detected capacity change from 0 to 4096 [ 736.372262][T15463] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.383745][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.401647][T15463] device bridge_slave_1 entered promiscuous mode [ 736.540525][T15401] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 736.613713][T15463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.648319][T15401] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 736.680540][T15463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.745095][T15401] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 736.764719][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3147'. [ 736.828691][T15401] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 736.839727][T15573] loop7: detected capacity change from 0 to 128 [ 736.882422][T15463] team0: Port device team_slave_0 added [ 736.954408][T15463] team0: Port device team_slave_1 added [ 737.078093][T15463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.085392][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.117161][T15463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.144309][T15463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.152977][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.179506][T15463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.321011][T15401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.374700][T15463] device hsr_slave_0 entered promiscuous mode [ 737.406383][T15463] device hsr_slave_1 entered promiscuous mode [ 737.425401][T15463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.435927][T15590] loop7: detected capacity change from 0 to 4096 [ 737.443540][T15463] Cannot create hsr debugfs directory [ 737.534459][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 737.570967][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 737.602086][T15401] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.732201][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 737.754365][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 737.803066][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.810283][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.843190][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 737.862300][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 737.883682][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.891063][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.927268][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 737.957962][ T6041] Bluetooth: hci1: command 0x041b tx timeout [ 738.013262][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 738.039450][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 738.057327][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 738.082852][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 738.118174][ T6041] Bluetooth: hci0: command 0x040f tx timeout [ 738.189676][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 738.224870][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 738.280421][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 738.342135][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 738.381573][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 738.454457][T15579] chnl_net:caif_netlink_parms(): no params data found [ 738.510798][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 738.528752][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 738.670452][T15401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 739.007052][T15579] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.019671][T15579] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.071648][T15579] device bridge_slave_0 entered promiscuous mode [ 739.118526][T15579] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.151838][T15579] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.159576][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 739.193648][T15579] device bridge_slave_1 entered promiscuous mode [ 739.422181][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 739.434717][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 739.460216][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.484583][T15401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.657447][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.710253][T15579] team0: Port device team_slave_0 added [ 739.850315][T15579] team0: Port device team_slave_1 added [ 739.917347][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.976851][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.021084][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.038322][ T6046] Bluetooth: hci1: command 0x040f tx timeout [ 740.077524][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.110466][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.154499][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.198447][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 740.260807][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 740.293676][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 740.449905][T15579] device hsr_slave_0 entered promiscuous mode [ 740.467045][T15579] device hsr_slave_1 entered promiscuous mode [ 740.488735][T15579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.496786][T15579] Cannot create hsr debugfs directory [ 740.514696][T15401] device veth0_vlan entered promiscuous mode [ 740.559536][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 740.591101][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 740.618244][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 740.643176][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 740.704508][T15401] device veth1_vlan entered promiscuous mode [ 740.745297][T15463] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 740.782268][T15463] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 740.836565][T15463] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 740.927425][T15463] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 740.956758][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 740.974611][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 740.993395][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 741.020993][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 741.047854][T15401] device veth0_macvtap entered promiscuous mode [ 741.100216][T15401] device veth1_macvtap entered promiscuous mode [ 741.179529][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.217659][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.237957][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 741.252540][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.303520][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.354793][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.405510][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.416885][T15698] loop7: detected capacity change from 0 to 1024 [ 741.435594][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.456101][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.489570][T15401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.517313][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 741.535104][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 741.554615][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 741.574902][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 741.590261][T15698] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 741.622196][T15698] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 741.650606][T15698] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 741.660923][T15698] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 741.670228][T15698] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 741.918453][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.957186][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.026560][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.068841][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.117994][ T6046] Bluetooth: hci1: command 0x0419 tx timeout [ 742.123542][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.143251][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.153610][T15401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.167042][T15401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.180235][T15401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.202302][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 742.228938][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 742.358555][T15401] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.367320][T15401] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.386828][T15401] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.397333][T15401] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.416049][T15463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.459327][ T391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.549230][T15463] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.565634][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 742.577794][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.594322][T10855] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 742.595609][ T391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.636367][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 742.649487][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.659960][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.667033][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.675512][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.684421][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.693438][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.700743][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.710603][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 742.720605][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.807451][ T391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.829355][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.840341][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.852245][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.861512][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 742.870631][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.881778][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 742.890766][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.900084][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 742.926635][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 742.945829][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 742.963786][ T391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.985800][T15463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 743.011707][T10855] usb 8-1: config index 0 descriptor too short (expected 60955, got 27) [ 743.025920][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.055536][T10855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 743.063620][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.095144][T10855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 743.116701][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 743.151196][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.188584][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.200818][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 743.291843][T10855] usb 8-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 743.324471][T10855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.362839][T10855] usb 8-1: Product: syz [ 743.388204][T10855] usb 8-1: Manufacturer: syz [ 743.392869][T10855] usb 8-1: SerialNumber: syz [ 743.422358][T10855] usb 8-1: config 0 descriptor?? [ 743.427512][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 743.471310][T10855] keyspan 8-1:0.0: Keyspan - (without firmware) converter detected [ 743.558969][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 743.577131][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 743.618099][T15463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.676770][ T4245] usb 8-1: USB disconnect, device number 12 [ 743.698586][ T4245] keyspan 8-1:0.0: device disconnected [ 743.757419][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 743.779108][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.872717][T15463] device veth0_vlan entered promiscuous mode [ 743.929836][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 743.947191][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 743.992799][T15463] device veth1_vlan entered promiscuous mode [ 744.030166][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 744.050974][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 744.090317][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 744.226651][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 744.258445][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 744.302773][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 744.359011][T15463] device veth0_macvtap entered promiscuous mode [ 744.399762][T15463] device veth1_macvtap entered promiscuous mode [ 744.446688][T15579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 744.481428][T15579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 744.528153][T15579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 744.634350][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.646206][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.680396][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.717865][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.738292][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.797693][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.823853][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.862997][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.884117][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.907127][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.932038][T15463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.954567][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 744.965734][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 744.974525][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 744.984082][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 744.994074][T15579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 745.006394][T15771] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3200'. [ 745.035771][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.078012][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.104410][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.167985][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.186654][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.198099][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.208895][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.220335][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.235250][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.250921][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.264462][T15463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.275281][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 745.319912][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 745.379204][T15463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.415482][T15463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.438301][T15463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.447229][T15463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.468431][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 745.535636][T15804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3214'. [ 745.550124][T15803] netlink: 'syz.7.3213': attribute type 20 has an invalid length. [ 745.583929][T15803] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.015282][ T3036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.055821][ T3036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.090397][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 746.167308][T15579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.213804][T15829] netlink: 'syz.5.3226': attribute type 20 has an invalid length. [ 746.229052][T15829] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.255289][ T3036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.280772][ T3036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.313908][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 746.329706][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 746.355428][T15579] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.382910][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 746.401965][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3227'. [ 746.483397][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 746.523604][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 746.579172][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.586303][ T3036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.652177][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 746.669414][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 746.673256][T15844] loop7: detected capacity change from 0 to 512 [ 746.687673][ T3036] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.694882][ T3036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.844958][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 746.880835][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 746.921214][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 747.394554][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.401691][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.661282][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 747.718236][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 747.785950][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 747.877093][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 747.942808][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 747.979190][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.014513][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.047008][T15579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.091948][T15579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 748.125577][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.148761][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.279413][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3239'. [ 748.904328][T15888] loop7: detected capacity change from 0 to 1024 [ 748.968739][T15891] IPv6: NLM_F_CREATE should be specified when creating new route [ 748.999618][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.038366][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.075126][T15579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.103068][T15889] loop2: detected capacity change from 0 to 4096 [ 749.134754][ T391] device hsr_slave_0 left promiscuous mode [ 749.156264][ T391] device hsr_slave_1 left promiscuous mode [ 749.182810][ T391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.221477][T15889] EXT4-fs (loop2): Test dummy encryption mode enabled [ 749.231856][ T391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.293738][T15889] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 749.315018][ T391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.322944][ T391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.353658][ T391] device bridge_slave_1 left promiscuous mode [ 749.373802][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.401381][ T391] device bridge_slave_0 left promiscuous mode [ 749.407677][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.467199][ T391] device hsr_slave_0 left promiscuous mode [ 749.493770][ T391] device hsr_slave_1 left promiscuous mode [ 749.519920][ T391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.538202][ T391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.587060][ T391] device bridge_slave_1 left promiscuous mode [ 749.619208][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.656693][ T391] device bridge_slave_0 left promiscuous mode [ 749.744056][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.751753][ T6041] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 749.792786][ T391] device veth1_macvtap left promiscuous mode [ 749.843000][ T391] device veth0_macvtap left promiscuous mode [ 749.847370][T15918] loop7: detected capacity change from 0 to 128 [ 749.873454][ T391] device veth1_vlan left promiscuous mode [ 749.907276][ T391] device veth0_vlan left promiscuous mode [ 749.997999][ T6041] usb 10-1: device descriptor read/64, error -71 [ 750.291050][ T6041] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 750.498746][ T6041] usb 10-1: device descriptor read/64, error -71 [ 750.587447][T15928] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3264'. [ 750.628740][ T6041] usb usb10-port1: attempt power cycle [ 750.930043][ T391] team0 (unregistering): Port device team_slave_1 removed [ 750.946443][ T391] team0 (unregistering): Port device team_slave_0 removed [ 750.960880][ T391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.975554][ T391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.058400][ T6041] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 751.070601][ T391] bond0 (unregistering): Released all slaves [ 751.168036][ T6041] usb 10-1: device descriptor read/8, error -71 [ 751.274386][ T391] team0 (unregistering): Port device team_slave_1 removed [ 751.290285][ T391] team0 (unregistering): Port device team_slave_0 removed [ 751.305776][ T391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.324081][ T391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.402771][ T391] bond0 (unregistering): Released all slaves [ 751.457918][ T6041] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 751.489958][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 751.509385][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 751.588186][ T6041] usb 10-1: device descriptor read/8, error -71 [ 751.588724][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 751.628682][T15936] loop7: detected capacity change from 0 to 164 [ 751.640694][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 751.655361][T15938] loop2: detected capacity change from 0 to 1024 [ 751.678014][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 751.703371][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 751.720853][ T6041] usb usb10-port1: unable to enumerate USB device [ 751.732566][T15579] device veth0_vlan entered promiscuous mode [ 751.739725][T15936] Unable to read rock-ridge attributes [ 751.745513][T15936] isofs_fill_super: root inode is not a directory. Corrupted media? [ 751.804006][T15579] device veth1_vlan entered promiscuous mode [ 751.948983][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 751.970730][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 752.001461][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.038272][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.060550][T15579] device veth0_macvtap entered promiscuous mode [ 752.074695][T15938] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 752.085054][T15949] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3273'. [ 752.106097][T15579] device veth1_macvtap entered promiscuous mode [ 752.225040][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.250092][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.263518][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.277604][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.304629][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.315515][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.327181][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.338856][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.350738][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.371904][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.411399][T15579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.438310][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 752.477486][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.536337][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 752.598956][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.718108][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.768326][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.782544][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.958112][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.971327][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.019112][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.112531][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.134000][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.167489][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.189419][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.219376][T15579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.238788][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 753.260210][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 753.310000][T15977] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3284'. [ 753.513411][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3286'. [ 753.674181][T15579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.728707][T15579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.771724][T15579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.798067][T15579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.070197][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3296'. [ 754.139737][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.147756][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.241750][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 754.266647][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.333885][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.376374][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.457650][T16025] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 754.470066][T16025] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 754.728487][T16041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3309'. [ 754.933435][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3315'. [ 755.003719][T16056] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 755.247569][ T26] audit: type=1804 audit(1777906013.541:36): pid=16072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3324" name="bus" dev="ramfs" ino=79526 res=1 errno=0 [ 755.368086][ T26] audit: type=1804 audit(1777906013.571:37): pid=16072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3324" name="bus" dev="ramfs" ino=79526 res=1 errno=0 [ 755.501980][T16085] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3327'. [ 755.821427][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3330'. [ 758.093818][T16165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3349'. [ 758.201359][T16165] netem: invalid attributes len -8 [ 758.235280][T16165] netem: change failed [ 758.341663][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3355'. [ 758.934746][T16218] loop2: detected capacity change from 0 to 128 [ 759.055351][T16218] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 759.192994][T16218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 759.279539][T16218] ext2 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.869085][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 762.383050][T16331] loop2: detected capacity change from 0 to 1024 [ 762.443464][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 762.481903][T16331] hfsplus: xattr searching failed [ 764.289436][T16394] loop9: detected capacity change from 0 to 1024 [ 764.495893][T16404] loop2: detected capacity change from 0 to 4096 [ 764.568166][T16404] EXT4-fs (loop2): Test dummy encryption mode enabled [ 764.663356][T16404] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 764.839991][T16394] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 764.867408][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3435'. [ 766.319389][T16489] loop7: detected capacity change from 0 to 1024 [ 766.436634][T16495] binder: BINDER_SET_CONTEXT_MGR already set [ 766.539332][T16495] binder: 16492:16495 ioctl 4018620d 200000004a80 returned -16 [ 767.597127][T16514] loop9: detected capacity change from 0 to 1024 [ 767.778973][T16514] hfsplus: xattr searching failed [ 769.673058][T16582] loop7: detected capacity change from 0 to 16 [ 769.798365][T16582] /dev/loop7: Can't open blockdev [ 769.912290][T16593] loop7: detected capacity change from 0 to 256 [ 769.936198][T16593] /dev/loop7: Can't open blockdev [ 769.958025][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 770.255082][T16607] loop7: detected capacity change from 0 to 1024 [ 772.574164][T16699] loop2: detected capacity change from 0 to 1024 [ 772.636336][T16697] loop7: detected capacity change from 0 to 4096 [ 772.774877][T16699] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 773.010692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 773.202927][T16736] loop2: detected capacity change from 0 to 1024 [ 773.340894][T16736] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.3534: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 773.477737][T16736] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.3534: couldn't read orphan inode 11 (err -117) [ 773.513589][T16736] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 773.749336][T16763] loop2: detected capacity change from 0 to 1024 [ 774.421147][T16800] loop7: detected capacity change from 0 to 128 [ 774.620045][T16810] 9pnet: Insufficient options for proto=fd [ 775.117978][ T4258] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 775.397911][ T4258] usb 8-1: Using ep0 maxpacket: 32 [ 775.518616][ T4258] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.690938][ T4258] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.720961][ T4258] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.840278][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 775.888277][ T4258] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 775.914859][ T4258] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 775.967662][ T4258] usb 8-1: Product: syz [ 775.994394][ T4258] usb 8-1: Manufacturer: syz [ 776.013160][ T4258] usb 8-1: SerialNumber: syz [ 776.058389][T16844] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3570'. [ 776.086289][T16848] 9pnet: Insufficient options for proto=fd [ 776.118851][ T4258] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input21 [ 776.320821][T16856] loop2: detected capacity change from 0 to 1024 [ 776.473635][T16856] hfsplus: xattr searching failed [ 776.688941][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3583'. [ 776.811932][T16884] 9pnet: Insufficient options for proto=fd [ 777.296515][T16908] loop2: detected capacity change from 0 to 1024 [ 777.471881][T16908] hfsplus: xattr searching failed [ 777.494860][T16908] hfsplus: xattr searching failed [ 777.522876][T16908] hfsplus: xattr searching failed [ 777.642854][T16925] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3597'. [ 777.746390][ T6041] usb 8-1: USB disconnect, device number 13 [ 777.832629][ T6041] appletouch 8-1:1.0: input: appletouch disconnected [ 778.632437][T16974] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3612'. [ 778.997995][ T4232] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 779.287906][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 779.418906][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.650186][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.911918][ T4232] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.078099][ T4232] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 780.087472][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 780.115907][ T4232] usb 3-1: Product: syz [ 780.130699][ T4232] usb 3-1: Manufacturer: syz [ 780.135360][ T4232] usb 3-1: SerialNumber: syz [ 780.258060][ T4232] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input22 [ 780.804065][T17017] loop7: detected capacity change from 0 to 512 [ 780.910897][T14230] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.185395][T14230] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.329878][T14230] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.434122][T17018] chnl_net:caif_netlink_parms(): no params data found [ 781.456116][T14230] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.563111][T17018] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.570953][T17018] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.579614][T17018] device bridge_slave_0 entered promiscuous mode [ 781.610935][T17018] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.620381][ T13] usb 3-1: USB disconnect, device number 17 [ 781.627999][ T9731] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 781.630519][T17018] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.646033][ T13] appletouch 3-1:1.0: input: appletouch disconnected [ 781.653610][T17018] device bridge_slave_1 entered promiscuous mode [ 781.716207][T17018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.774825][T17018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.008032][ T9731] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.052363][ T9731] usb 10-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 782.065110][T17018] team0: Port device team_slave_0 added [ 782.091321][ T9731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.110668][T17018] team0: Port device team_slave_1 added [ 782.139999][ T9731] usb 10-1: config 0 descriptor?? [ 782.197257][T17059] loop7: detected capacity change from 0 to 4096 [ 782.222191][T17018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.235438][ T9731] rndis_wlan: probe of 10-1:0.0 failed with error -22 [ 782.248755][ T9731] rndis_host: probe of 10-1:0.0 failed with error -22 [ 782.275456][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.414022][T17018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.430624][ T1111] usb 10-1: USB disconnect, device number 6 [ 782.549683][T17018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.556696][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.610524][T17018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.694097][T17018] device hsr_slave_0 entered promiscuous mode [ 782.763574][T17018] device hsr_slave_1 entered promiscuous mode [ 782.809428][T17018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.827875][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 782.854564][T17018] Cannot create hsr debugfs directory [ 783.564924][T17106] 9pnet: Insufficient options for proto=fd [ 784.010917][T17116] loop9: detected capacity change from 0 to 8 [ 784.139468][T17116] SQUASHFS error: Unable to read inode 0x11f [ 784.249934][T14230] device hsr_slave_0 left promiscuous mode [ 784.278683][T14230] device hsr_slave_1 left promiscuous mode [ 784.295233][T14230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.316146][T14230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.351386][T14230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.369400][T14230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.408774][T14230] device bridge_slave_1 left promiscuous mode [ 784.415156][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.450272][T14230] device bridge_slave_0 left promiscuous mode [ 784.467749][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.518673][T14230] device veth1_macvtap left promiscuous mode [ 784.524931][T14230] device veth0_macvtap left promiscuous mode [ 784.529655][T17134] loop9: detected capacity change from 0 to 512 [ 784.545082][T14230] device veth1_vlan left promiscuous mode [ 784.571861][T14230] device veth0_vlan left promiscuous mode [ 784.595240][T17134] EXT4-fs (loop9): Ignoring removed nobh option [ 784.604194][T17134] EXT4-fs (loop9): Test dummy encryption mode enabled [ 784.720545][T17134] EXT4-fs error (device loop9): __ext4_iget:4919: inode #11: block 1: comm syz.9.3652: invalid block [ 784.725427][T17141] 9pnet: Insufficient options for proto=fd [ 784.744981][T17134] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.3652: couldn't read orphan inode 11 (err -117) [ 784.824024][T17134] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noload,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 785.045509][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 785.404585][T14230] team0 (unregistering): Port device team_slave_1 removed [ 785.447318][T14230] team0 (unregistering): Port device team_slave_0 removed [ 785.465879][T14230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.491186][T14230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.608063][ T6041] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 785.674346][T14230] bond0 (unregistering): Released all slaves [ 785.792234][T17185] 9pnet: Insufficient options for proto=fd [ 785.809727][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3658'. [ 785.874217][T17018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 785.903236][T17018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 785.928534][T17191] loop7: detected capacity change from 0 to 16 [ 785.935822][T17018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 785.952370][T17018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 786.008105][ T6041] usb 10-1: not running at top speed; connect to a high speed hub [ 786.028454][T17191] /dev/loop7: Can't open blockdev [ 786.118449][ T6041] usb 10-1: config 95 has an invalid interface number: 1 but max is 0 [ 786.177842][ T6041] usb 10-1: config 95 has no interface number 0 [ 786.184348][ T6041] usb 10-1: config 95 interface 1 has no altsetting 0 [ 786.289560][T17018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.330004][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 786.350357][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 786.363305][T17018] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.388377][T17203] loop2: detected capacity change from 0 to 4096 [ 786.411444][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 786.421054][ T6041] usb 10-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 786.442555][T17203] EXT4-fs (loop2): Test dummy encryption mode enabled [ 786.456889][ T6041] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.466648][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 786.484719][ T6041] usb 10-1: Product: syz [ 786.489822][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.497000][ T4634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.523670][T17203] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 786.537689][ T6041] usb 10-1: Manufacturer: syz [ 786.543129][ T6041] usb 10-1: SerialNumber: syz [ 786.587639][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 786.596439][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 786.605672][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 786.616509][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.623829][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.637662][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 786.672038][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 786.722022][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 786.791493][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 786.822454][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 786.862212][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 786.882913][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 786.912677][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 786.934697][ T13] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 786.944387][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 786.991786][ T6041] usb 10-1: USB disconnect, device number 7 [ 787.038183][T17018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.068364][ T9731] Bluetooth: hci2: command 0x040f tx timeout [ 787.099376][T17018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 787.127743][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 787.168648][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 787.254724][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 787.348397][ T13] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.375704][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.407982][ T13] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 787.468148][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.537621][ T13] usb 8-1: config 0 descriptor?? [ 787.698789][ T13] rndis_wlan: probe of 8-1:0.0 failed with error -22 [ 787.706082][ T13] rndis_host: probe of 8-1:0.0 failed with error -22 [ 787.892188][ T6041] usb 8-1: USB disconnect, device number 14 [ 788.142458][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 788.184957][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 789.041616][T17018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.129057][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3686'. [ 789.147899][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 789.218547][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3688'. [ 789.251924][T17272] loop9: detected capacity change from 0 to 1024 [ 789.382863][T17272] hfsplus: unable to find HFS+ superblock [ 790.033390][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 790.135513][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 790.775111][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 790.811125][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 790.855878][T17018] device veth0_vlan entered promiscuous mode [ 790.873891][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 790.908789][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 790.965779][T17018] device veth1_vlan entered promiscuous mode [ 790.999301][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3702'. [ 791.039892][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 791.074894][T17337] input: syz0 as /devices/virtual/input/input24 [ 791.139992][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 791.163218][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 791.202604][T17018] device veth0_macvtap entered promiscuous mode [ 791.225446][T17018] device veth1_macvtap entered promiscuous mode [ 791.290466][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.341449][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.392422][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.471505][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.623065][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.721674][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.978379][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.128822][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.366899][T17363] loop2: detected capacity change from 0 to 2048 [ 792.381888][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.447992][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.485186][T17018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.501659][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3711'. [ 792.536491][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 792.570606][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 792.581475][T17363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 792.604097][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 792.629166][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 792.637866][T17363] UDF-fs: bad mount option "loginuid" or missing value [ 792.667540][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.722644][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.760036][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.781616][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.803914][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.836103][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.952084][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.036965][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.126275][T17018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.239036][T17018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.326647][T17018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.348348][T17384] loop7: detected capacity change from 0 to 164 [ 793.433481][T17018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.450206][T17018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.465154][T17018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.490852][T17018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.538982][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 793.587275][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 793.718196][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3722'. [ 794.037368][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.085797][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.098173][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 794.148840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 794.194615][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.257840][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.266229][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 794.654582][T17419] loop7: detected capacity change from 0 to 4096 [ 794.778201][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'. [ 795.102685][T17447] input: syz0 as /devices/virtual/input/input25 [ 795.576890][T17467] loop2: detected capacity change from 0 to 4096 [ 795.743150][T17467] EXT4-fs (loop2): Test dummy encryption mode enabled [ 795.816871][T17467] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 795.968913][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3755'. [ 796.087103][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3759'. [ 796.821619][T17525] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 797.358671][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 797.414924][T17560] fuse: Bad value for 'fd' [ 798.306068][T17599] loop2: detected capacity change from 0 to 512 [ 798.343481][T17602] loop7: detected capacity change from 0 to 256 [ 798.386833][T17599] EXT4-fs (loop2): Ignoring removed nobh option [ 798.408306][T17599] EXT4-fs (loop2): Test dummy encryption mode enabled [ 798.425467][T17602] exfat: Bad value for 'time_offset' [ 798.471261][T17599] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 1: comm syz.2.3791: invalid block [ 798.549785][T17599] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.3791: couldn't read orphan inode 11 (err -117) [ 798.644916][T17599] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noload,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 798.831207][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3797'. [ 798.880123][T17627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 800.404047][T17675] fuse: Bad value for 'fd' [ 801.668347][T17696] loop5: detected capacity change from 0 to 512 [ 801.722615][T17696] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 801.771150][T17696] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 801.805239][T17696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 801.825554][T17696] System zones: 1-12 [ 801.837515][T17696] EXT4-fs (loop5): orphan cleanup on readonly fs [ 801.876911][T17696] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3821: invalid indirect mapped block 2 (level 2) [ 801.961427][T17696] EXT4-fs (loop5): Remounting filesystem read-only [ 801.992156][T17696] EXT4-fs (loop5): 1 truncate cleaned up [ 802.015898][T17696] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback. [ 803.164582][T17771] loop5: detected capacity change from 0 to 1024 [ 803.278466][T17771] hfsplus: xattr searching failed [ 804.167984][ T4258] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 805.017604][T17822] 9pnet: p9_errstr2errno: server reported unknown error  [ 805.323795][T17838] loop5: detected capacity change from 0 to 128 [ 805.393722][T17838] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 805.439175][T17838] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 805.459546][T17838] ext2 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.896916][T17858] binder_alloc: 17854: binder_alloc_buf, no vma [ 806.829980][T17886] loop5: detected capacity change from 0 to 128 [ 806.903992][T17886] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 806.979753][T17886] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 807.023036][T17886] ext2 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.088497][ T4232] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 808.272508][T17925] fuse: Bad value for 'fd' [ 808.831424][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.838262][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.882795][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3896'. [ 809.899721][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3905'. [ 810.166556][T17994] binder: 17992:17994 ioctl c0306201 200000000680 returned -14 [ 812.042404][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3916'. [ 813.501985][T18091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 813.527910][T18092] input: syz1 as /devices/virtual/input/input30 [ 814.628674][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3944'. [ 815.177631][T18157] binder: 18156:18157 ioctl 400c620e 2000000001c0 returned -22 [ 815.237957][ T4232] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 815.455776][T18159] loop2: detected capacity change from 0 to 4096 [ 815.507932][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 815.531485][T18159] EXT4-fs (loop2): Test dummy encryption mode enabled [ 815.620352][T18159] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 815.634278][ T4232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.674377][ T4232] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.701282][T18179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3952'. [ 815.878105][ T4232] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 815.909237][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.918048][ T4232] usb 6-1: Product: syz [ 815.938045][ T4232] usb 6-1: Manufacturer: syz [ 815.957844][ T4232] usb 6-1: SerialNumber: syz [ 815.980117][ T4232] usb 6-1: config 0 descriptor?? [ 817.092773][T18226] 9pnet: Insufficient options for proto=fd [ 817.199593][T18230] loop2: detected capacity change from 0 to 1024 [ 817.310160][T18230] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,abort,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 817.359144][T15718] usb 6-1: USB disconnect, device number 16 [ 817.408298][T18230] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.521323][ T26] audit: type=1800 audit(1777906093.820:38): pid=18230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3966" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 817.567486][T18242] loop5: detected capacity change from 0 to 256 [ 817.613200][T18243] loop7: detected capacity change from 0 to 1024 [ 817.655493][T18242] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 818.335058][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3977'. [ 818.880619][T18281] loop5: detected capacity change from 0 to 4096 [ 819.003651][T18281] EXT4-fs (loop5): Test dummy encryption mode enabled [ 819.065810][T18281] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 819.715251][T18307] loop2: detected capacity change from 0 to 1024 [ 820.007930][ T4258] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 820.387971][ T9731] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 820.798050][ T9731] usb 3-1: unable to get BOS descriptor or descriptor too short [ 820.858029][ T9731] usb 3-1: not running at top speed; connect to a high speed hub [ 820.938102][ T9731] usb 3-1: config 3 has an invalid interface number: 98 but max is 0 [ 820.946955][ T9731] usb 3-1: config 3 has no interface number 0 [ 820.967018][ T9731] usb 3-1: config 3 interface 98 altsetting 10 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 820.997844][ T9731] usb 3-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid wMaxPacketSize 0 [ 821.454662][ T9731] usb 3-1: config 3 interface 98 has no altsetting 0 [ 821.618191][ T9731] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8 [ 821.636231][ T9731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.686075][ T9731] usb 3-1: Product: syz [ 821.698367][ T9731] usb 3-1: Manufacturer: syz [ 822.008296][ T9731] usb 3-1: SerialNumber: syz [ 822.741164][ T9731] usb 3-1: USB disconnect, device number 18 [ 822.791366][T18363] loop5: detected capacity change from 0 to 1024 [ 823.491905][T18383] loop5: detected capacity change from 0 to 4096 [ 823.653111][T18383] EXT4-fs (loop5): Test dummy encryption mode enabled [ 823.694018][T18383] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 824.134246][ T26] audit: type=1326 audit(1777906100.430:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 824.147917][ T9731] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 824.296448][ T26] audit: type=1326 audit(1777906100.460:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 824.432633][ T26] audit: type=1326 audit(1777906100.460:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 824.589952][ T26] audit: type=1326 audit(1777906100.460:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 824.708157][ T26] audit: type=1326 audit(1777906100.460:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 824.876246][T18437] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[18441] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[18437] [ 824.904037][ T26] audit: type=1326 audit(1777906100.460:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 824.947980][T18433] loop7: detected capacity change from 0 to 4096 [ 825.082348][ T26] audit: type=1326 audit(1777906100.460:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 825.203578][ T26] audit: type=1326 audit(1777906100.470:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 825.679016][ T26] audit: type=1326 audit(1777906100.470:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 825.718330][T18464] 9pnet: Insufficient options for proto=fd [ 825.847839][ T26] audit: type=1326 audit(1777906100.470:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18407 comm="syz.5.4010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd99effcdd9 code=0x7ffc0000 [ 826.741347][T18503] loop7: detected capacity change from 0 to 1024 [ 828.219184][ T9731] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 830.953475][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 834.046588][T18688] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[18692] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[18688] [ 834.507887][ T9731] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 834.827942][ T9731] usb 3-1: Using ep0 maxpacket: 32 [ 834.948038][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 834.987873][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50557, setting to 1024 [ 835.034403][ T9731] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 835.107846][ T9731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.145351][ T9731] usb 3-1: config 0 descriptor?? [ 835.178160][T18702] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 835.199844][ T9731] hub 3-1:0.0: USB hub found [ 835.317840][ T4258] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 835.427959][ T9731] hub 3-1:0.0: 1 port detected [ 835.567841][ T4258] usb 8-1: Using ep0 maxpacket: 16 [ 835.648241][ T9731] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 835.659120][ T9731] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 835.688401][ T4258] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.708190][ T4258] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 835.777914][ T9731] usbhid 3-1:0.0: can't add hid device: -71 [ 835.783981][ T9731] usbhid: probe of 3-1:0.0 failed with error -71 [ 835.839191][ T9731] usb 3-1: USB disconnect, device number 20 [ 835.888486][ T4258] usb 8-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 835.908591][ T4258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.936836][ T4258] usb 8-1: Product: syz [ 835.949564][ T4258] usb 8-1: Manufacturer: syz [ 835.964292][ T4258] usb 8-1: SerialNumber: syz [ 835.999616][ T4258] usb 8-1: config 0 descriptor?? [ 836.290104][ T4245] usb 8-1: USB disconnect, device number 17 [ 837.376588][T18751] binder: BINDER_SET_CONTEXT_MGR already set [ 837.416794][T18751] binder: 18745:18751 ioctl 4018620d 2000000002c0 returned -16 [ 838.018015][T18769] device bridge0 entered promiscuous mode [ 838.642130][T18765] device bridge0 left promiscuous mode [ 842.782392][T18851] loop2: detected capacity change from 0 to 1024 [ 844.397879][ T1111] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 844.647972][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 844.768078][ T1111] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 844.806854][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.876338][ T1111] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 845.058156][ T1111] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 845.089005][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.133344][ T1111] usb 3-1: Product: syz [ 845.155387][ T1111] usb 3-1: Manufacturer: syz [ 845.176215][ T1111] usb 3-1: SerialNumber: syz [ 845.219521][ T1111] usb 3-1: config 0 descriptor?? [ 845.788566][T15718] usb 3-1: USB disconnect, device number 21 [ 847.081630][T18944] loop5: detected capacity change from 0 to 1024 [ 848.736363][T18981] loop2: detected capacity change from 0 to 1024 [ 848.791900][T18988] 9pnet: Could not find request transport: fd0x0000000000000005 [ 848.913469][T18993] loop7: detected capacity change from 0 to 1024 [ 849.204940][T18998] input: syz0 as /devices/virtual/input/input31 [ 849.281875][ T4402] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.421186][ T4402] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.505755][ T4402] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.596869][ T4402] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.739490][T19037] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4189'. [ 851.537823][ T4245] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 851.665514][T19049] loop2: detected capacity change from 0 to 128 [ 851.697156][T19049] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 851.770814][T19049] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 851.837019][T19056] 9pnet: Could not find request transport: fd0x0000000000000005 [ 851.897833][ T4245] usb 2-1: Using ep0 maxpacket: 32 [ 852.028158][ T4245] usb 2-1: config 2 has too many interfaces: 255, using maximum allowed: 32 [ 852.041571][ T4245] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 852.052076][ T4245] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 255 [ 852.063516][ T4245] usb 2-1: config 2 has no interface number 0 [ 852.245949][T19034] chnl_net:caif_netlink_parms(): no params data found [ 852.258103][ T4245] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 852.282714][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.309997][ T4245] usb 2-1: Product: syz [ 852.323954][ T4245] usb 2-1: Manufacturer: syz [ 852.329635][ T4245] usb 2-1: SerialNumber: syz [ 852.400727][ T4245] asix: probe of 2-1:2.88 failed with error -22 [ 852.486562][T19034] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.494189][T19034] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.502728][T19034] device bridge_slave_0 entered promiscuous mode [ 852.512876][T19034] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.520381][T19034] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.529229][T19034] device bridge_slave_1 entered promiscuous mode [ 852.555052][T19034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.567405][T19034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.636160][T19034] team0: Port device team_slave_0 added [ 852.722290][T19034] team0: Port device team_slave_1 added [ 852.729193][ T4258] usb 2-1: USB disconnect, device number 18 [ 853.538087][ T9731] Bluetooth: hci4: command 0x0409 tx timeout [ 853.609277][T19034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.616735][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.725540][T19103] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4203'. [ 854.437807][T19034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.538983][T19034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.610376][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.749959][T19034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.867383][T19131] 9pnet: Could not find request transport: fd0x0000000000000005 [ 854.992603][T19034] device hsr_slave_0 entered promiscuous mode [ 855.012949][T19034] device hsr_slave_1 entered promiscuous mode [ 855.037868][T19034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 855.075948][T19034] Cannot create hsr debugfs directory [ 855.102469][T19135] fuse: Bad value for 'fd' [ 855.548933][T15019] Bluetooth: hci4: command 0x041b tx timeout [ 855.708803][T19153] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4217'. [ 856.740588][ T4402] device hsr_slave_0 left promiscuous mode [ 856.776988][ T4402] device hsr_slave_1 left promiscuous mode [ 856.908290][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.919325][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.963975][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.983148][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.040655][ T4402] device bridge_slave_1 left promiscuous mode [ 857.047114][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.084510][ T4402] device bridge_slave_0 left promiscuous mode [ 857.108310][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.222237][ T4402] device veth1_macvtap left promiscuous mode [ 857.229147][ T9731] Bluetooth: hci1: command 0x0406 tx timeout [ 857.265176][ T4402] device veth0_macvtap left promiscuous mode [ 857.275847][T19184] 9pnet: Insufficient options for proto=fd [ 857.302846][ T4402] device veth1_vlan left promiscuous mode [ 857.329323][ T4402] device veth0_vlan left promiscuous mode [ 857.455441][ T4245] Bluetooth: hci0: command 0x0406 tx timeout [ 857.468874][T19186] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4229'. [ 857.627988][ T9731] Bluetooth: hci4: command 0x040f tx timeout [ 857.839463][ T4402] bond1 (unregistering): Released all slaves [ 858.290554][ T4402] team0 (unregistering): Port device team_slave_1 removed [ 858.352643][ T4402] team0 (unregistering): Port device team_slave_0 removed [ 858.397983][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.428088][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.571059][ T4402] bond0 (unregistering): Released all slaves [ 859.389682][T19238] 9pnet: Insufficient options for proto=fd [ 859.415694][T19236] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[19241] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[19236] [ 859.591073][T19034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.644188][T19034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.693198][T19034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 859.707858][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 859.733437][T19034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 860.297999][T19034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.368973][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 860.385976][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.443212][T19034] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.496429][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 860.533860][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.591705][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.599076][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.709676][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 860.762713][T19288] fuse: Unknown parameter 'grou00000000000000000000' [ 860.778814][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 860.870230][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 860.931298][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.938575][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.016040][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 861.069733][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 861.126422][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 861.155789][T19300] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4268'. [ 862.021064][T19305] binder: 19304:19305 ioctl c018620c 200000000240 returned -22 [ 862.028733][T19308] 9pnet: Insufficient options for proto=fd [ 862.047935][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 862.107497][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 862.184902][T19297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4267'. [ 862.212064][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 862.243989][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 862.320571][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 862.374418][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 862.445335][T19034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.543793][T19034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 862.617515][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 862.639406][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 862.684627][T19327] fuse: Unknown parameter 'grou00000000000000000000' [ 863.001660][T19339] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4279'. [ 864.641778][T19369] 9pnet: Insufficient options for proto=fd [ 864.672945][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 864.692175][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 864.721844][T19034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.788999][T19374] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4290'. [ 866.429713][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 866.472641][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.701553][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.733673][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.788314][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.796833][T19413] 9pnet: Insufficient options for proto=fd [ 867.264162][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 867.753301][T19034] device veth0_vlan entered promiscuous mode [ 867.850564][T19034] device veth1_vlan entered promiscuous mode [ 867.912682][T19426] netlink: 'syz.2.4304': attribute type 4 has an invalid length. [ 868.357628][T19431] loop5: detected capacity change from 0 to 128 [ 868.365932][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 868.395323][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 868.566704][T19034] device veth0_macvtap entered promiscuous mode [ 869.366295][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 869.381174][T19034] device veth1_macvtap entered promiscuous mode [ 869.492492][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.538795][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.539018][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4308'. [ 869.637827][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.709528][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.767219][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.846551][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.924808][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.934390][T19460] fuse: Unknown parameter 'group_id00000000000000000000' [ 869.955406][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.997786][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.031472][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.055688][T19034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.066755][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.083680][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.133189][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.165950][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.203963][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.216616][T19467] loop2: detected capacity change from 0 to 2048 [ 870.231145][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.276399][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.283204][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.304365][T19467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 870.308757][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.354480][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.373334][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.387147][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.406945][T19034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.418871][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 870.428855][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 870.443177][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 870.471164][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 870.540275][T19034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.589554][T19034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.664365][T19034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.707904][T19034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.991969][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.051004][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.101275][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 871.129516][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.151465][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.220510][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 872.379247][T15463] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 872.438944][T15463] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 872.654529][ T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 873.060446][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 873.085201][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 873.298219][ T13] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 873.326002][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.381829][ T13] usb 2-1: Product: syz [ 873.386211][ T13] usb 2-1: Manufacturer: syz [ 873.427719][ T13] usb 2-1: SerialNumber: syz [ 873.470858][ T13] usb 2-1: config 0 descriptor?? [ 873.513548][ T13] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 873.759734][T19550] fuse: Unknown parameter 'group_id00000000000000000000' [ 873.852387][ T13] usb 2-1: USB disconnect, device number 19 [ 874.041370][T19562] loop5: detected capacity change from 0 to 164 [ 874.124225][T19562] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 874.638804][T19583] fuse: Bad value for 'user_id' [ 875.374014][T19622] fuse: Bad value for 'fd' [ 875.432816][T19623] loop4: detected capacity change from 0 to 256 [ 875.485081][T19623] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 875.578019][T19623] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 875.644764][T19623] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 875.877648][T19602] chnl_net:caif_netlink_parms(): no params data found [ 876.225062][T19602] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.246416][T19602] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.248389][T19661] fuse: Bad value for 'fd' [ 876.255098][T19602] device bridge_slave_0 entered promiscuous mode [ 876.523533][T19602] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.017225][T19602] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.067860][ T9731] Bluetooth: hci1: command 0x0409 tx timeout [ 877.176469][T19602] device bridge_slave_1 entered promiscuous mode [ 877.364267][T19602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.440208][T19683] loop4: detected capacity change from 0 to 256 [ 877.474183][T19602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.507472][T19683] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 877.599379][T19683] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 877.659980][T19683] exFAT-fs (loop4): Filesystem has been set read-only [ 877.764929][T19602] team0: Port device team_slave_0 added [ 877.806078][T19602] team0: Port device team_slave_1 added [ 878.164844][T19602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.219732][T19602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.317481][T19602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.517874][ T4258] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 878.531612][T19602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.552104][T19602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.647710][T19602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.757824][ T4258] usb 5-1: Using ep0 maxpacket: 16 [ 878.784497][T19602] device hsr_slave_0 entered promiscuous mode [ 878.833824][T19602] device hsr_slave_1 entered promiscuous mode [ 878.877756][T19602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.878042][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.907812][T19602] Cannot create hsr debugfs directory [ 878.935817][ T4258] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 879.137979][ T4258] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 879.172239][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.207820][ T4258] usb 5-1: Product: syz [ 879.223325][ T4258] usb 5-1: Manufacturer: syz [ 879.242737][ T4258] usb 5-1: SerialNumber: syz [ 879.290144][ T4258] usb 5-1: config 0 descriptor?? [ 879.315901][ T9731] Bluetooth: hci1: command 0x041b tx timeout [ 879.435050][T19742] kvm: pic: single mode not supported [ 880.396686][T19602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 880.439139][T19774] binder: 19773:19774 ioctl c0306201 0 returned -14 [ 880.463509][T19602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 880.498801][T19602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 880.539600][T19602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 880.778871][T19602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.809914][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 880.833406][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 880.854122][T19602] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.875809][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 880.903058][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 880.953086][T10855] usb 5-1: USB disconnect, device number 23 [ 881.000865][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.008250][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.094621][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 881.119465][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 881.136805][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 881.152891][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.160069][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.334146][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 881.446309][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 881.499215][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 881.546389][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 881.590815][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 881.599933][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 881.613467][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 881.627224][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 881.644989][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 881.698343][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 881.738602][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 881.767434][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 881.799118][T19602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 882.274158][T15718] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 882.423667][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 882.469876][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 882.485161][T19602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.487763][ T13] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 882.557905][T15718] usb 6-1: Using ep0 maxpacket: 32 [ 882.565209][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 882.580549][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 882.633672][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 882.653698][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 882.671570][T19602] device veth0_vlan entered promiscuous mode [ 882.694614][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 882.703489][T15718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 882.746870][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 882.755089][T15718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50557, setting to 1024 [ 882.776926][T19602] device veth1_vlan entered promiscuous mode [ 882.783804][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 882.794925][T15718] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 882.816451][T15718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.849169][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 882.859958][T14232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 882.874710][T15718] usb 6-1: config 0 descriptor?? [ 882.904594][T19602] device veth0_macvtap entered promiscuous mode [ 882.912315][T19810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 882.935066][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 882.944128][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.955655][T15718] hub 6-1:0.0: USB hub found [ 882.970210][ T13] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 882.988549][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 883.007788][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 883.029182][T19602] device veth1_macvtap entered promiscuous mode [ 883.094211][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.127583][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.158626][T15718] hub 6-1:0.0: 1 port detected [ 883.160709][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.178118][ T13] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 883.197795][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.205967][ T13] usb 2-1: Product: syz [ 883.217775][ T13] usb 2-1: Manufacturer: syz [ 883.227379][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.237980][ T13] usb 2-1: SerialNumber: syz [ 883.268256][ T13] usb 2-1: config 0 descriptor?? [ 883.273810][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.295182][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.317706][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.357708][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.369727][T15718] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 883.377747][T15718] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 883.417747][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.440713][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.474561][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.517740][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.528651][T15718] usbhid 6-1:0.0: can't add hid device: -71 [ 883.536370][T15718] usbhid: probe of 6-1:0.0 failed with error -71 [ 883.568310][T19602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.589208][T15718] usb 6-1: USB disconnect, device number 18 [ 883.620317][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 883.628462][ T9731] Bluetooth: hci1: command 0x0419 tx timeout [ 883.642158][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 883.669316][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 883.693883][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.730484][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.774699][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.818700][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.849389][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.912106][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.948471][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.990101][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.020884][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.062436][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.105184][T19602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.152273][T19602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.195378][T19602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.213211][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 884.232765][T14230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 884.762140][T19602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.825703][T19602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.859797][T19602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.917092][ T4179] usb 2-1: USB disconnect, device number 20 [ 884.952591][T19602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.263347][T14230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.294556][T14230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.394449][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 885.446205][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.477127][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.515571][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 887.354348][T19918] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 888.215351][T19921] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4434'. [ 889.148940][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4443'. [ 889.302248][T19947] loop5: detected capacity change from 0 to 8 [ 889.424672][T19947] SQUASHFS error: zlib decompression failed, data probably corrupt [ 889.460338][T19947] SQUASHFS error: Failed to read block 0x9b: -5 [ 889.499894][T19947] SQUASHFS error: Unable to read metadata cache entry [99] [ 889.508039][T19947] SQUASHFS error: Unable to read inode 0x127 [ 889.582202][T19952] fuse: Bad value for 'fd' [ 890.066759][T19970] netlink: 83 bytes leftover after parsing attributes in process `syz.5.4453'. [ 891.402708][T20011] fuse: Bad value for 'fd' [ 892.187870][ T6041] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 892.457730][ T6041] usb 2-1: Using ep0 maxpacket: 32 [ 892.587966][ T6041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 892.617792][ T6041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50557, setting to 1024 [ 892.639913][ T6041] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 892.660445][ T6041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.698058][ T6041] usb 2-1: config 0 descriptor?? [ 892.738093][T20030] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 892.789546][ T6041] hub 2-1:0.0: USB hub found [ 892.997845][ T6041] hub 2-1:0.0: 1 port detected [ 893.056061][T20065] fuse: Bad value for 'fd' [ 893.208134][ T6041] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 893.218068][ T6041] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 893.315925][T20072] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 893.417915][ T6041] usbhid 2-1:0.0: can't add hid device: -71 [ 893.424393][ T6041] usbhid: probe of 2-1:0.0 failed with error -71 [ 893.448783][T20074] fuse: Bad value for 'fd' [ 893.518534][ T6041] usb 2-1: USB disconnect, device number 21 [ 894.109085][T20099] fuse: Unknown parameter 'use00000000000000000000' [ 895.432119][T20141] fuse: Unknown parameter 'use00000000000000000000' [ 896.680793][T20181] fuse: Unknown parameter 'user_i00000000000000000000' [ 897.416525][T20214] fuse: Unknown parameter 'user_i00000000000000000000' [ 898.048276][ T4258] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 898.946859][T20260] fuse: Unknown parameter 'user_i00000000000000000000' [ 900.947241][T20315] fuse: Bad value for 'fd' [ 901.434649][T20334] loop4: detected capacity change from 0 to 512 [ 901.517124][T20334] EXT4-fs (loop4): Ignoring removed nobh option [ 901.548340][T20334] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 901.603792][T20334] EXT4-fs (loop4): 1 truncate cleaned up [ 901.712650][T20334] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,nobh,nodiscard,,errors=continue. Quota mode: none. [ 902.321622][T20355] fuse: Unknown parameter 'user_id00000000000000000000' [ 903.067847][ T9731] Bluetooth: hci3: command 0x0406 tx timeout [ 903.075157][ T9731] Bluetooth: hci2: command 0x0406 tx timeout [ 904.779233][T20396] loop5: detected capacity change from 0 to 256 [ 904.849839][T20396] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 904.951393][T20396] exFAT-fs (loop5): error, invalid size(size(0) > aligned(9223372036854777344) [ 904.951393][T20396] [ 905.013724][T20396] exFAT-fs (loop5): Filesystem has been set read-only [ 907.037953][T20449] blktrace: Concurrent blktraces are not allowed on loop2 [ 907.079205][T20449] relay: one or more items not logged [item size (56) > sub-buffer size (14)] [ 907.508947][T20461] 9pnet: Insufficient options for proto=fd [ 909.975354][T20506] 9pnet: Insufficient options for proto=fd [ 910.331499][T20511] fuse: Bad value for 'fd' [ 910.925412][T20543] 9pnet: Insufficient options for proto=fd [ 910.997806][ T4179] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 912.060346][T20562] fuse: Unknown parameter '0xffffffffffffffff' [ 913.397973][T20607] fuse: Unknown parameter '0xffffffffffffffff' [ 913.734176][T20627] futex_wake_op: syz.1.4640 tries to shift op by -1; fix this program [ 914.038520][T20645] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 914.878198][T20678] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 916.421574][T20716] 9pnet: Insufficient options for proto=fd [ 916.429838][T20718] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 918.220692][T20753] loop5: detected capacity change from 0 to 512 [ 918.278475][T20753] EXT4-fs (loop5): Ignoring removed nobh option [ 918.302514][T20753] EXT4-fs (loop5): Ignoring removed nobh option [ 918.347788][T20753] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 918.350217][T20763] fuse: Bad value for 'fd' [ 918.449306][T20753] EXT4-fs (loop5): 1 truncate cleaned up [ 918.455541][T20753] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,usrjquota=,nobh,nobh,i_version,,errors=continue. Quota mode: none. [ 918.504787][T20770] 9pnet: Insufficient options for proto=fd [ 918.845056][T20784] loop5: detected capacity change from 0 to 256 [ 918.911403][T20784] exFAT-fs (loop5): invalid boot record signature [ 918.943323][T20784] exFAT-fs (loop5): failed to read boot sector [ 918.967772][T20784] exFAT-fs (loop5): failed to recognize exfat type [ 919.935360][T20799] fuse: Bad value for 'fd' [ 920.192370][ T4179] Bluetooth: hci1: command 0x0411 tx timeout [ 920.640559][T20830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4703'. [ 920.732294][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 922.107449][T20870] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4715'. [ 922.341519][T20887] fuse: Bad value for 'fd' [ 923.659389][T20932] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4732'. [ 925.528492][T20998] loop4: detected capacity change from 0 to 1024 [ 925.664423][T21006] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 925.787021][T20998] hfsplus: b-tree write err: -5, ino 26 [ 926.609177][ T3094] hfsplus: b-tree write err: -5, ino 25 [ 926.615023][ T3094] hfsplus: b-tree write err: -5, ino 4 [ 926.660630][ T3094] hfsplus: b-tree write err: -5, ino 2 [ 926.667526][T21015] loop5: detected capacity change from 0 to 512 [ 926.711206][ T3094] hfsplus: b-tree write err: -5, ino 27 [ 926.737295][ T3094] hfsplus: b-tree write err: -5, ino 26 [ 926.764673][T21015] EXT4-fs (loop5): Ignoring removed nobh option [ 926.776153][T21015] EXT4-fs (loop5): Ignoring removed nobh option [ 926.783574][T21015] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 926.891871][T21015] EXT4-fs (loop5): 1 truncate cleaned up [ 926.897987][T21015] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,usrjquota=,nobh,nobh,i_version,,errors=continue. Quota mode: none. [ 927.221883][T21042] binder: 21030:21042 ioctl c018620c 2000000000c0 returned -22 [ 928.297013][T21068] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4779'. [ 929.500485][T21097] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 929.541135][T21098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4792'. [ 929.713458][T21113] loop4: detected capacity change from 0 to 736 [ 930.781718][T21140] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4805'. [ 932.264804][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.271609][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.019985][T21176] "syz.5.4815" (21176) uses obsolete ecb(arc4) skcipher [ 934.466014][T21191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4821'. [ 934.579371][T21195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 937.784925][T21244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4837'. [ 939.870052][T21290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4851'. [ 940.448082][T21321] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4863'. [ 940.794625][T21341] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 941.480796][T21372] loop5: detected capacity change from 0 to 1024 [ 941.562298][T21372] EXT4-fs (loop5): Ignoring removed orlov option [ 941.589525][T21372] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 941.589525][T21372] [ 942.165136][T21413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 942.226213][T21416] loop5: detected capacity change from 0 to 512 [ 942.292428][T21416] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 942.360603][T21416] EXT4-fs (loop5): 1 truncate cleaned up [ 942.367109][T21416] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 943.437739][ T4179] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 947.246637][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4954'. [ 948.096479][T21642] No such timeout policy "syz1" [ 950.272366][T21664] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000007 [ 951.732164][T21711] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000007 [ 952.146310][T21734] loop4: detected capacity change from 0 to 256 [ 952.200053][T21734] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 952.244884][T21734] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 952.286563][T21734] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 953.263636][T21788] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 954.926000][T21834] 9pnet: Insufficient options for proto=fd [ 955.014182][T21838] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 955.029892][ T4179] kernel write not supported for file bpf-prog (pid: 4179 comm: kworker/1:3) [ 955.418646][T21855] loop4: detected capacity change from 0 to 256 [ 955.557899][T21855] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 956.417851][ T9731] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 956.667826][ T9731] usb 6-1: Using ep0 maxpacket: 8 [ 956.787895][ T9731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.817836][ T9731] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 956.827131][ T9731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.951727][ T9731] usb 6-1: config 0 descriptor?? [ 957.205058][ T1111] usb 6-1: USB disconnect, device number 20 [ 957.345718][T21938] 9pnet: Insufficient options for proto=fd [ 957.846203][T21962] loop4: detected capacity change from 0 to 1024 [ 958.003532][T21962] EXT4-fs (loop4): Ignoring removed orlov option [ 958.103923][T21962] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,lazytime,sysvgroups,norecovery,usrjquota=,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 958.868077][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 958.868095][ T26] audit: type=1326 audit(1777906271.173:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22003 comm="syz.5.5082" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd99effcdd9 code=0x0 [ 959.584429][T22034] 9pnet: Insufficient options for proto=fd [ 960.639642][T22066] netem: incorrect ge model size [ 960.645771][T22066] netem: change failed [ 960.745453][T22070] 9pnet: Insufficient options for proto=fd [ 961.448312][ T4233] kernel write not supported for file bpf-prog (pid: 4233 comm: kworker/1:5) [ 963.548789][T22159] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 963.965314][T22178] fuse: Unknown parameter 'group_i00000000000000000000' [ 964.446446][T22198] 9pnet: Insufficient options for proto=fd [ 964.566368][T22204] loop5: detected capacity change from 0 to 16 [ 964.628230][T22204] erofs: (device loop5): mounted with root inode @ nid 36. [ 964.661496][T22208] device wlan0 entered promiscuous mode [ 964.685651][T22208] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1069.847567][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1069.854577][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21148/1:b..l [ 1069.863460][ C1] (detected by 1, t=10502 jiffies, g=108617, q=23) [ 1069.870074][ C1] task:kworker/u4:13 state:R running task stack:26672 pid:21148 ppid: 2 flags:0x00004000 [ 1069.882932][ C1] Workqueue: bat_events batadv_nc_worker [ 1069.888625][ C1] Call Trace: [ 1069.892035][ C1] [ 1069.895146][ C1] __schedule+0x11ef/0x43c0 [ 1069.899766][ C1] ? mark_lock+0x94/0x320 [ 1069.904232][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1069.910326][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 1069.915809][ C1] preempt_schedule_irq+0xbb/0x160 [ 1069.920968][ C1] ? __cond_resched+0xd0/0xd0 [ 1069.926151][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1069.932248][ C1] irqentry_exit+0x63/0x70 [ 1069.936683][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1069.942260][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 1069.947951][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1069.968050][ C1] RSP: 0018:ffffc9000315faa0 EFLAGS: 00000206 [ 1069.974316][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 42d68c51fa7efd00 [ 1069.982301][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3aa0 RDI: ffffffff8a79fe00 [ 1069.990378][ C1] RBP: ffffc9000315fbc0 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 1069.998738][ C1] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: ffffffff8c31eb20 [ 1070.006823][ C1] R13: 1ffff9200062bf60 R14: 0000000000000246 R15: dffffc0000000000 [ 1070.015111][ C1] ? rcu_lock_release+0x5/0x20 [ 1070.020005][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1070.025399][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1070.030795][ C1] rcu_lock_acquire+0x2a/0x30 [ 1070.035578][ C1] ? rcu_lock_acquire+0x5/0x30 [ 1070.040369][ C1] batadv_nc_worker+0xc9/0x5c0 [ 1070.045247][ C1] process_one_work+0x85f/0x1010 [ 1070.050253][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1070.055990][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1070.061302][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1070.066350][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1070.071920][ C1] ? wq_worker_running+0x97/0x170 [ 1070.077088][ C1] worker_thread+0xaa6/0x1290 [ 1070.081936][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1070.087254][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1070.093615][ C1] kthread+0x436/0x520 [ 1070.097790][ C1] ? rcu_lock_release+0x20/0x20 [ 1070.103196][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1070.107808][ C1] ret_from_fork+0x1f/0x30 [ 1070.112431][ C1] [ 1070.115467][ C1] rcu: rcu_preempt kthread starved for 10524 jiffies! g108617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1070.127121][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1070.137281][ C1] rcu: RCU grace-period kthread stack dump: [ 1070.143181][ C1] task:rcu_preempt state:R running task stack:26128 pid: 15 ppid: 2 flags:0x00004000 [ 1070.154367][ C1] Call Trace: [ 1070.157675][ C1] [ 1070.160730][ C1] __schedule+0x11ef/0x43c0 [ 1070.165301][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1070.171318][ C1] ? __mod_timer+0x91e/0xd00 [ 1070.176129][ C1] schedule+0x11b/0x1e0 [ 1070.180434][ C1] schedule_timeout+0x184/0x2d0 [ 1070.185389][ C1] ? console_conditional_schedule+0x40/0x40 [ 1070.191303][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1070.197562][ C1] ? update_process_times+0x200/0x200 [ 1070.203221][ C1] ? prepare_to_swait_event+0x331/0x350 [ 1070.209070][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 1070.214039][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 1070.220352][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 1070.225138][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1070.230352][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1070.235660][ C1] rcu_gp_kthread+0x9b/0x370 [ 1070.240268][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1070.246275][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1070.251450][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1070.257505][ C1] ? __kthread_parkme+0x157/0x1b0 [ 1070.262581][ C1] kthread+0x436/0x520 [ 1070.267360][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1070.272566][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1070.277214][ C1] ret_from_fork+0x1f/0x30 [ 1070.281734][ C1] [ 1070.284857][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1070.291472][ C1] NMI backtrace for cpu 1 [ 1070.295797][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1070.302990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1070.313138][ C1] Call Trace: [ 1070.316432][ C1] [ 1070.319457][ C1] dump_stack_lvl+0x188/0x250 [ 1070.324149][ C1] ? show_regs_print_info+0x20/0x20 [ 1070.329429][ C1] ? load_image+0x400/0x400 [ 1070.333946][ C1] ? irq_work_queue+0xbf/0x140 [ 1070.338832][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1070.343902][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1070.350222][ C1] ? _printk+0xda/0x130 [ 1070.354458][ C1] ? cpu_online+0x1d/0x30 [ 1070.358865][ C1] ? load_image+0x400/0x400 [ 1070.363371][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1070.369430][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1070.375610][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 1070.381783][ C1] print_other_cpu_stall+0x1110/0x1270 [ 1070.387248][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 1070.392191][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 1070.397475][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 1070.402869][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 1070.407717][ C1] ? account_process_tick+0x22a/0x3a0 [ 1070.413121][ C1] update_process_times+0x193/0x200 [ 1070.418493][ C1] tick_sched_timer+0x37d/0x560 [ 1070.423440][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 1070.428976][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 1070.434260][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1070.439365][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1070.445618][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 1070.450730][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1070.456898][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1070.462785][ C1] [ 1070.465852][ C1] [ 1070.468980][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1070.474975][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1070.480005][ C1] Code: b7 48 89 df e8 76 39 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 b5 5f 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1070.499787][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 1070.505927][ C1] RAX: c8ed109df1431100 RBX: ffff88813fe68000 RCX: c8ed109df1431100 [ 1070.514100][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe00 [ 1070.522068][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 1070.530119][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 1070.538296][ C1] R13: dffffc0000000000 R14: 1ffff11027fcd000 R15: 0000000000000000 [ 1070.546515][ C1] default_idle_call+0x81/0xc0 [ 1070.551378][ C1] do_idle+0x251/0x650 [ 1070.555463][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1070.560685][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1070.566835][ C1] ? schedule_idle+0x57/0x90 [ 1070.571518][ C1] cpu_startup_entry+0x14/0x20 [ 1070.576274][ C1] start_secondary+0x330/0x430 [ 1070.581228][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 1070.586856][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 1070.592841][ C1]