last executing test programs: 9m56.23348807s ago: executing program 1 (id=26): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) fsopen(0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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") ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 9m51.527736561s ago: executing program 1 (id=38): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[], 0x0) 9m49.176685437s ago: executing program 1 (id=41): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 9m48.523434854s ago: executing program 1 (id=45): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) truncate(&(0x7f00000000c0)='./file1\x00', 0x7) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000500)={'bridge0\x00', 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7fffffff, 0x1000108, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0xffffffcc}}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa2d}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x4}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r3, r4, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006200)="277922c31d68964cc03e9e8592c222e18acc0f5ae6346cd023fcf98cd237b648447e00e281207a7038c3997e69161f989366d7738c6a807c2726adf695efe754229a48c802d694690baf032cd88751b51245ac2ae3cb87e2da3db338e806c84063ea8ee43acea049545630a1692335e4d9ad11c42dc95224386146bcbfa6e0e32934404b4254075accf64cfd5bbc23a190ca981970738abb255a1c05a7a7261f683d10f4794ae174671d216a657598331b469a73bd985469b03b8545b5f7d48a08205ae92d6abe68819fa23e161b654b2871e649b19bd2b7d79838f3d80fc506560b33c20a6cc20877bf2eefcdaab788d15ce7e9634c272973df277427cb913d08aa0b235b1a797617e798a18c4b555c5835e17114c49a57f23f0d8f0a22e3522e5a8e9e788bcdf48c08862177ce92e00a606211b9302639bb851867acdbd7920b47618e9994a6fec653c692d733d5f6fa1305bf9f2582a3ca12fb440550ee9614932fb67d04092a8171c800c6796b44bf78eaa7506cb5f09c3e63b0e80738e09c767438f60fb1a3cc3e8c57caa6c5058d5e1c64903f9b81a90bd0221bce6d209c8123dc4381412da223ec55d193a8e5b8cbe69503b6b3b6d44ce168e48d794f2c655486ae999750f123814a3ea830cc0e9c71ce5b260414a44ffbed56791bac519504f3745012cac2384507df2cd1ff1f0c693b0a0f7aab727e5b1856b2d9b7ec809a60b96a063967389f5ff96958226292eff653ad449bda3902c1683aafa81b0c689864f3bf3929abd9c567acdbd0af6154184f55aa5b86b94a035c98aa3565dcb3394fed13e64800d3917e69b8fb7a9affa2ab0ed3b6d21ee31826979efc6f1cd62327357143e268988d072732786223ed15eae9d42c267afd9b377cc2b0c3bf5b6bc8cbdceeb336bccdc708a0cc4773e900a2778bd8c97a342147b1fae79fd6271e3b25a9a630ad38a9aa6d84806549ac07a8ca631b6b565cd45b9ad30cd047af2063a4ff070c04ee4b8b1a7152fd3d29825000bed0b237df40f01e8b59014fe8b4236381d10bf04d57aa7a1aac76e9af7466fe0b3724df3decae064c3a3d3000e285ec83e1c893e9c08eefe5f4fd86f457f90ed4b675ec7d5457cef36043bd7c1c611115c63a7d7819dcce86d71a0255193436aa96d2619fb2d52db332dbe3245f84125e221ab5a918ad13217b914cc61685761686c56f74fa5c10a6c1a586bd5abc2585ea9d6ac070647cf3f631508debe7c28d6482f0f8a2afea7a61d2f0c166a1b7dd6135ac9c7469c95ccd1025d0149cee049873cb9d69a89e9bab13a80183944876522c8f0c0c551ca7f4faa495c643bec973b92bf13dfa9803981394ff290cb1f4e48d3356224ec7df9284baef008c19949c4570b4d753c4fa0dc97175209102a38a0f3e8fa9e6b52319b81db379f4bee52bdcdc136825179ab72d9ac6f3f5a72cae5b11340f8056eb050523c5049938a2572eaafbce4e073e115a520da2f1905ec6daf637bbfc879b02fdb58bd8426526b916366bce92f87ad76d1ef5ca6946006ccf17687fdfa62cd23e441e2f6effbdd0a175ce00ca86cb0dfc2cad7f818caf7dbf64ce6e63b5320954957c100701c06024a02c28ab13250f029ae8f2dea7fcb60f5cb65f4f8bba2ac3270811bb4c12641b7fb0f80d14ffc2a9c45f2001b0d54c98465d1cd2619a1546134bad9268ff48710fa833a3f3191711d1c7bdfcb502acdc51b9f9642c1066bb01a9e912e0de1b5f8acf8d9e1177a252df26b7cb690747d2023d7cdff3904281b37218981ddb6d044360d65be09dc2efdf3cef9f9d6416d81485bed6a997ff00daa26fbd59c39705b7e590a95362bc4cb54329a89840af5c1cf587e8c05a3b4f83d45ea2b06110fdb93627da88e09c51e669ae3bc43632aa638d1549ada4f1c11d935cc9757e254c0c0417852be06a023f27a41bf1e086648a365cefaf7bc994f083a68d5643256a3cb9263c571576c6d0b1dd221dc7fbdd9cb908f631eb3f1158b41d28893ece18af0f8b8c03bd960de7868d231a6e2d19c4975d0c2f8f910f6fdae49618379bbc0d41ba2c7922409b036d08d217529cb3317f0caf97e94b679fbcaf808a1a859cd4f468e4df8ee3567c684ba1f04213c7fbff3857fbde87c722f4c3a6cf027b13706ce61b7a9fa4eb823607600e7007fc114fb5f303d5986785a680ad68101d41ca518056da41ab94ff03ae20b23e50cb5cd9345788e6e7773bb5d0423c35861f10f3484be3ce23adc4a46560463a704f8c631dddfea199ba045f5d6c20ef130fbeccb32de365d28c88108904f523d936801b846e7130e68dc843c0ddbe490f305f5884642dc1d51ba2937537ec1c1d1ba1f8b5add859132b52a8f44349d7de31486a4c017109595d07231d6329f50de6802eee32b9d6fcdb2b16f58ce1ea0fa2e7c462e4d73c8cbdbdef5c714696f6ff8b7ca46f5f8277d5181475099377763cdf5a2b20d5a6ece550919b567d412ae2523444f49f09510a5f8d2397b4545d9377f40d4d57be884b2643f6737b1c9ac2708d3e48b590e5b7362fc86f5f56e116a544f3a80c1ae66a2e42a335b015ed6ffbc3b6ad6740fdad3ee9168effce9ddb9ae97845cf2a38c79df3813a4a8408895d8dd33bdb254fd620dd3c833cb33fb3af63befd7ac09178f6f4fefbd136c727957ca25cc4e365ac2ef7cee2c88d29901c11c5d8d12d7c9bd1f1eb591d6da52b26e64144bf691059f001352598fd1ad651c9d23d8e74aaf99400e4b87a7c8141be5eb3f9a563cb76f163ec93e24e4219ea98b3191223d93b02d032e66d674e9ad844b3115fa0d07c41637db3b46b0133b9b1b8fc85d5494787f63692d18f5512f6e8515c0c14b844996db924954c59d9f1dec047b235163891edb13d05e16e212bd5003cdce8cdf7260bd90fab16d8a8032ab9b86bf62be8253e02e0c2fc0a1396b1f48a9258818626dec32d5035b1c16463a7953b4a977915898b07d1129699dbd341742357f25bbb6099503dc59878f544a84eda8011d10d273e4af343b051036556c1d31327161f76a2670cef78917915d37d9e707865b0dc1881201958856a50694ebfb8a4b850a234278ea48db61f6e322512e317d5fd55627c60084da63a6ea6d0df272faf59f26d05a88d8b400d728b975e78ef53867a68e2b6bb85c3356f062449f8b1a17ec2adf0307c98aef35da9e0d235bc730fb79a6acfd187a32b6e5f915598009bf07b398069afc19e7d42e9c2666572bf68b7d1e21aa232da07df107a1eae11424f867a9228158456e58db9d87969a68ae7837c20a5a2166324a89a193be2cb43fc9a4896583839e96dc2d2c9317e3dd217c234406f7a1704f5a958469f8c55f7073920405b2ea60e8ee9209932aba2199eb1d4146cd7870805348c5ddebf374700d6969ea1d45a5695f70e63dbba7d5659c2ac527cf95f735530c23abd9c1db64ec66b174fbef5f26fe3963879f77f42abd1dd7eac962deb43f2aa0d4b61ba37b23ad99e30a0bcfd0af86c219170a025a357ed3e3b70b520bcb0cf507ac4241e4b545d306fdf4ca2d4fb48d751c6948392691ccb5dd5a8be9534a2684ae38fac7445dc3367e9a8d96cfdaced050092959cd434b4fcebf180fc313c8f2631dc6323544ab3315cbc1d72baf9239ef7ea1412816de7fa77b05c9a999e197949e5e8ee6536318ca7d5cf15dda41fee8429533a332c1a25ae4b2fd1bf1ededee9c3d740d1e6c98cc85309e3b6f10a7cb5c5e6e4b8772621ca50d1e38f25fd82ffa3c92578c0802b457f8b33bfecf75309a85d8603b7599aabe8f1078a81a0bb5d40a4341cf0fc882ebac3d7fdc6fd8455153340dacd3c2ae558d0c6b057b98f6b533ba245221a43440f222feb40848e5c33c75ef084cce1e1f1c06261ba4035b987c09b46bff92db4022e358f2d6dc0f229d4fa63d57d49c865b7f33e490790f67fe426c691aa6feb8bc72dc759b44b61b88c02d6c23d3bb590e24813ce8c1534afeb8709d9dd41872bfef287c89b07158463de8b37016fb71ff18d78de431c4f9869d6c0719d649325a3ba437a714f36bdf59f88cf0602134a003e746efab8ef201acf73b396c9e64cc971bb81844450a92b8f11b4006cbea25ae8f4300fb98df7146c5e4a9f3ca620355f9d679e66288a8b4da298662242a8a333cdd828d91f4da4f7ce991092d49455b3da53b31ff92f5866695d5f76a033af6d2f44658ad94c1c6c601a296bd0f3e6b9e64a89653285f2ed775a8ff2cb4d1557bc491f44c5a3349ef58e25a03c3787b770c596fab20fe08248993cf28c28575ff8caeb0adea9789b667b253c3ebbd49a8977c2ff0f382bb604453d419cd6cfbad7d5a41605996bc6db74f2ddf8b29bdbb4355ffdb65a53437548154df7a8e8aec1d7435f2b33d0b83bbca7e1bb59f4ecd5502f0ab0d32bd2f38bcf730d51bbd85cacc455dee2313b7cbc37efabecb7fdeb6273fa4a84bcee0427b081ba6649faae4aa8b521b4cc80dac5e65c28dc1514e218cf06a3a10a96da464517ec03bbcefdb7e1e84c1178f083d3240df711bd80d7edc7ad037387d824e9bfbedd036615d2b8329de3d1702a4c33e928caa916665e39c01a50c030d4e3873cf3bba2d675dfe3cc8909fcaa6aaef885d4725680d544b39d29ed232a37554e29d1882d3f12391181f33b5744fd7344216aad50005525f54e401f11e95268a2a50a940f8184f142062d524bdb70d91f898251bf06bafb5c630049cdf85c4ba756d4cfb814fc95f56a188476f699026e76ca4f26dd78dc2f983589002e348db9056f46734c3235dce0268995f9f2649dfbbbfed57e823211f7260e6be507fdb9f7ec808e34cacc7777a8a9350cc5c8e16938adb959d1c34951be3a849357b7db349d7c19698ef325341f9e0c78ca0777abd83c90bdff486f0617a541b001c089d63758f85032efd2a5b6cd1d42fb8bbab3a50ba775229756fd83460f6181de4d9fa8cb24920b966df24e12652d8f1f83c3e214f10174dd7e49f41494494c03151ac77d16894ead6c8dbd76921af9d065e1fd66dee01966ec317b2394bdad5ad3bbc19d5cbd2f998a80288c3c7d4a6d920e76fd7ac967ce7ba839b3443852ca681154cf6617c2041aa129a47e6beeeb7148920b577085c22bef1c2865f93e323e6103f3a685d542c73976df029b94afb3f5442a1a0dd5a9f8dbef5eb54cfe37a2df9891ce8f5658d728fcc07932c07cf097f09f1b69e9002b742e03fd78820ede2e60e095681aa906a97df20a3cce135fbdf0f770063ede222fe5f2cadf6b55d7eab829f86919ab0dc4e4fad77c2cbdf87981240ff63b9463ccf03b890c46233c3b6e0c54a1236c3f0c1e3812903b47c4aac784e0397423667396f01cfb07d6649ab0e5d0c0ff2bbe6795068d85cd1f282212d93b97613c75199130fe6a3ee28f24be01cdf4b2d2988a144c93be0ae043fb856bb4c21b695aa5d1e9bd1161d1a986c919d4efa84a9b04b1355dafe64a503d84ab4f3b5b76a1438e4cceb5c03d1442d1bf4a69a996431f2b736c626d8354a90e53f3fbaacb91075887c854043755bd8954ab9fff18b0262e3b3925251dc124305797888bb2bbd872c9b8d57d68d2c467a8b318ffde6a44f9a5f9967bf184a97d86be0e4449413c327d203fca8719ce046343a33c1bbe48b97becbc44095192e98da87a9b2ba234d250dfdf7ae6b5e5f91058dac2b20c0b7525484fd5278c74e8276625646dbdfd47a2cb6a48177b6226e1ee6e2c9a588512a269e6037e813cd741a2cf096f32d60cd7b68e4657f5607b0a296d8633e12be7ae72f9f6f895352f6676ef8b09d01bd024ae159c5780ecc6aafebf59895ca9b736164c30e5958b9aba1b49cc27949019467fa9b3fb6518ba9a359ee9c7035eba2066c786261e11a9b0a064cf96c8be43bf3119bc403e16476b112395354cba94950512c29646ccbb031d126e7ac1e9d972738bf08d2e15f3976e5a8ca653e57cf035a6c0eeb064cfbe1839da2bce876c5e9e37c9b952879c240c94510c82b71b3419b5ee7d7d5ef81f71194d34f6ada76ec8eaf4e6e9e924b71dffd273539ff44c82a05b6a7ea584157941daed273a0e739eca5db356ed547e9080ce6b163bef52df9a7ea7d56c5997e72d4c4fca3e77dc82d53cda693a66cfaabc7a163417d1e454e34c3ed177848b006501e900d16770bbb91d3234034284079a5bca16ee53e3b4e95c61014771a7e372e3bffdf399d4311d22957f46706b7b1a748b8e2a96a6cc4dc9db1e77f1f53196da5ee1948eb88aa5aa154add1376a453366820dd0bd77d3bfa003bc481fb2e2d8defda1da351a667e46b1c0fe58ff3c65d097f731f36225ad641cbb3c043d3cad02eeae1314ba5f6e4d53182241a28c2d01e4af9fad8c10bba1e6361db8f20b65fe214db3fe3891ded443a06b3a4be7132fd5a24e9e094ed08b50b1941bc40a9b18e4bc569ad22ff082e2ee54e382e791f443121df080a1abce25cd474128dd4ca10a749b80f91a9229875d9d09d3a24480a9883b96499c6df8d6d53c80f4a46e71d4b0767b1c3ceca0223cb87dc65c2180df575f7b0c090e1aaa61d2ba8aa6c0719c75d911e4dfc00d8c328295f150f0d3b450f9503bb359ca4d15788133a848aa7629b014d3413a4bf3b9a821b63b7cabc8ac84301b2819e3f4b7a4389652f5d0683f101b9ec1a937aec026e80bb88b6e9989253ba9dd64c79f7b7ca00d8c0edf29998ba9fe0d5563c59854df5e2bc92d38ca40298132b1c02e7da32c57ef85898dc8eb92cf17e4cf834aaccecb3b5ecac9da87044f64cb43310f50ad0b72debf3e733975c6c857b37cbfeb1b016cd4f0573c8b69e54e3eeb893fea4677109a4eecc9e7f7e3fd3d40e69f9f880a6dee14dc7c27ed2c57f269ff66ef841b787583fb83ff2814e8eacc877910be60e1db93bbc3f53e9511f3948a8a8e0011e40b03f4804e8967b1e443797fb9cbb2978d71e54b6af71b9cca3d6441dbf108c625ed779bcec18d9f70f06df382732d0b49bbebe347f563081527636c025828065a1ca8ef239febacfb3d2438efe4b23c1f973f5d7d4b5a3497b94c25ea951f29e48b3dd326685d8c06bccc06822451b4d4c7b1c2f3e86eda9b175b34b7b7e8cbc1b73681b5d8c3ebd4167dffa50d718b5607975e8653767eb7e87bcb6a6fb1940a4c6ca41f916acdab7d143f685fe9714366b66076abab743c646ea8c42847ae6fb3ae7a5145b9438b9203bb818cd294127efe7c776418afaf237704488193706c1f52807a608f0b2c361a6aa13b7b2e985b364a11f876f5644b7e2b84d4b90c0ab050126ec76e9594e682ef6e00f7a3e85e260280cf2b03700a00b0c0d2990f3897f670dc6401adb6419af14bafa35d56cf65b332086deb8857d59a7487179b7d2e6c525e54324fb837541be9d8b459872964086a3f98f9b795aef6e37a8b72bdbc1d087f622b2a4213fbcebbdbe6000da8dc3733522ba74653d23487c5dcaa5f4af161e7c73999168ed0f3566de365778a63cab1c100ddcfd8de12383b60676bce46a76a25251fb666b892b366183d02a3d591dfb97edf854af890ef65ebe8506d00420a64a900e7f20cc378224410cba88dee93e2787b13aa0fb6d7d97c582da047da1f367bfd6f226e13d303bce23b35e9d994c9d54a4e6d457b07bcae49edd6de6fcfe8b0ceb8d0fb693686319dfc61fceb7c5405ad812e266d35e51181e2c5180e0a64cc685466999048db40771405142e5e08cc0417a5b87a85672828d1425354db56f148b81fc0e648e578e33f38f26190f36635e432c1e21bfbbcbf5d8bb9b291d1e18d3d311558b2a60218f492f7880f8afee557a665d7cfc4a20bfd75449af8b0f19ca7b45764a7a4c116564b3e39674adf5eb079fad35b8e743d822079875aad7dfc1ae401bdf6ea77700e9b2bb3e2c459ccd8f28c9337c2900cb84076fc0a3d45858c51417ab5412ac0a00230043a793f44183326b47b60fe15c7f22a43c767ce5c8181a9a4c44964d26fc50ece3d85b533e5eafdd87384a7c73ea7da097b0f8770b7629caddaf12de1b0a447451b6b6ced331789bf917e24a1519aec5e2125a7913f84d9a7fa088933f0e1418f6223146b8bcb6ae221ec5bbc8666958e9edd03e83a320059b5f095b074078c755d524c6584363b55bb01e183a39f4b5138ff890b1c67222fe303af951d839e3a71cce561874df1e63b5ba53aa0fb13d3ec0138a526e297b1876311f8db632876a3669c79f47d4edbebcf403e44b29d8c8d999a87961485e4ac0fd7fb66f638d3b6f3973591b9eaf528726d352c2ba39b160deeabd0d4c1387f1dd29db58477aa5e25e48be96e95c93081eb7a1ba17417db741255d2f9368d226ed665a02bbcec14c8458e255f93d1e024b0c090a66c78f362956b9aae8db13e9bb1ba6b1439b9c2f9df0cbbbff37c03b6d97e5ec0f651b9c47c44df4fdaf1e1e58ee049df8970309990bb3b3f3bb1817660a6e438bb50b5ee10739df9df4df5eede96e270402a48641752558fad1806544a739742774c5e0e20f5468faf61dbfc9fede5a07ab7a54e9d0a2932d458050485925a2581a8af3e3539c820de4ab18bc2c94fb51961eca805405adf6d2d18af8be34b2eb803dda4af4499c56397b154b28f7737242e7ff3cf7eca57f6a1e068bf357710a8caa5a870c476b712ad9b2a9b51c823a3a32604f3464246ac90fd2129c012fa2f705b5fc28c3030c34d7df1a831c549dadb62bac2d2dfdddc821b96ac589619b3179982c45062270d9abc6794cf5bbc6a5f3d5d2f7e6e2741b573de9869fad21033e7088f6b6dfd2aa8bd3e7789809ec530caf908948806045652dffb56e2741340d7fef6223ce4e3f00ae648c07be306f8d67b22066e9bc252c2ada60d3ecc79cb29cfd4deb4e22d78092445fb27de9782b7cafb541cc04f30eff09de188c1fe9bed4cdfcc9f02eace508e488673abb4f3cbb399c0f5330300270d38492fd543a84ef0904f725b29131dae600ffac79415562a1a337ac51b1ea9a2d8561eb2885d2e08feebd5ec87e9b58ffdccb9155b2a978b0a0812789d4df930653c5cdc079fb45eba1a38e9f823f40f29f5234b70d2d6e7c9b7098f0caf0cbe3fecf452c66874fd3268f765b28881e382134eceed7a0b30c8661a4d1c361d299cc0eb0f57706d2bf900433f5fc0d3466c4dfe727c7e69cb8478c9f3c66b3a98b8932af4a6a0a4dd4eeb8dce9326c539459b82af5028192d7d1b81d0c6d424bba6e976e85c0a5b7bd6cca4ec4d00ee7458112178763cc4f8dc908ea86e313ee2a2a4cc1e204157240fdaa3f7c221166ee0d7c112422f357e081b0bdab46c34c1352ccf3efc7ae1ec3737bac470f8fef5942ac97fff8c1c6642e5cf2f733f776821f7527213f213772f60c31a26e71b4980cdf6896a3d9bcb13282eaa348cee4b2257f24abdfa58ccb4d238f0b34ec9bbf9a4f1764de447b9af04f9960700c38ff26523eb4f4e77863c538c6d26ce03bf4da7241881465c447c0cb0fe1792e141290923f79993228c053f1d2cfab750a87b64f48ea27d8550623b46ffc04ce1fd168f481de2d7ce2c57c4a98d31346ce2da7ddd05d0195b77b02eb95a50aecd6181dbb545b6f9badd7def429f7b833bc98b0295e13799577aea34e3f691b0df86ee42e331bc6d3554543a9db9512b6fb67c2333814efb4a6fb897e0a85e150111b5d34be4532a1e2ba044ffefdabf428d91b10fd627d2e613f295c38d274396a502d2e7334b295be14507d7fca78c53bd5359c5ea04cbbd1edb3c31025b06e7a93b198ff525478a6b87a22b1978951b26c19603a74e79bdf29daa153bf0ea5c0205298a352e9cd4d809115012b924bf338ffd3cc800a57891b9a728978bc060dc155c69ac65af5f4b3051e938d7cd22ef1de21e8f12311e3c8417b7ba7ae3f7c5d4d840fc2e56dc3f7a9b253f13b45c0bf249cab8e0b9bf97d36153b63c3df2acdfcec0a36e45069dd0a7947bd2e2925f74d0aaa2bfc22a8333883c6ec588acd89a6601fd61a4b5407b3d6443b765074bd4dcc56fa01638c9cd2e2e54249bc41849a727ea31f3d8994b365673df134e46bd3872ac1c7c479b472215c6b3ff7af96708996bd0735ebcd0a772008e05b7feb6344b6d6010222881d3b0462dd67f06522f77f63b5bffcce98f33f3337175d880fc2bd2145ac58286938cdf75bd56504390c500123065e53a487e9634ffefe03ccea989b13af327cdd840d342308ce12ad26f40ca242c97f28cc15f8e9709e19a0be5c3ea016a62735efc2dc5c6184547003cdc897afdd30ebd086af9449ff17ad64e9ee066107b3464313c4fe7344e6126351a07683ffbfb5fde7a743ffd3053f3e751e9ba89729a9195ac0ec423cb58a8c83435e24e2fb250b527162621284d8ef4b47ae6f5278bc22d248099622dcb1cfaa8376e32908e76bb6f88818e9e9616acf7f38d7b88b80490a7229c74d012627e3995c749b57a89b18149ffc8f60c0cf9c0f527fe48e1c49e13b15d8ca641a96607ca956486631f8d01618d9cfb2985b0c6e175bba854da27821834833babcce08efc328675c78673579ec83ae8015366ecd2f844587afdc595d9dba4f2c313f1f4a31d2c482fa5c4f86fa5ede03af0cc641c873307c4239f1c66764034fb29f10b1b746cf2149e7874b2e0ece9db4aa78b46377d9b7d13f8f9555546a51af50b6d3bc54e298c9486fa50ff1ac43b9dfe35bf7ff9f99313f76a3ad51c029cbda04cf13905b9c483ca6d7921a331ad7727ea65441ed2376a0b200b0dec05f09e8b231b47166fc2b0f140e8ec95646785d5db61f6f615f1d22cf7ad7b3e5e6d56ba0b3d0a2b4c205c707399c4ebe9b0cd053e0bc04a8d4da6f88719e6d8536c1dfa5b75ba78797656084588c8a951730709161df35f21a49163b1ad35a5d692517fe2baba0f06eebb5e0695668b40742e78fcfb33cdcd97ed4d375709c191e09abf376031a514ffecfe53ab81da5b270e816204d535ae1bdffbe2cedeac400fb2e707c01c442c86f816d28ddc4ec13116fc1555d0f6f385917dee220931307aa04ab9bbbc1ca7d3fbaa3df935457363c48ecc982efd0bf1dd77d92aede03596aaeeb859ec07fc866463860134c6b61e72719a4e6bab7918c0a190339176fa31ea43b15563171d9f3fd50474aaff66dc3f2d7b893bb25ad3f3ed41282d2b068aac9fed43a1e2e175d05ca1279abb824244a8a3c5c67cc5edc6088f37bd90449278f14b1059e00cde02ce0ead4b0f15d260d275326ad2043ba38a88eeeae6647e7daf30845083ed986ff0fc432bd43bfd4f4963702632c70b8f6270930a36adb2e2681eb444f93847597e8727100fcd9eea6bb46f5e7a96e98df0bfa128381bf48d164bf7695ba8bda8e15d706bc9d5d5b079d87d8bb4a8f6be7a3f171107fa9e11a5e847dc46ce7a08f90cb66ce14293d19d2db1f0048795a99184199e28089765b931d9b4771cb1c6c5d77f18de2b36631f0b3f9ce3dc201570c9fc4179c1d01f8d9d0ebb6db01781455471107b4234e96599e8c2fe943198393a59bb401a6be7ac5930c7554eff5", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x101000001, {0x5, 0x3, 0x9, 0x8, 0x8, 0x9, {0xfffffffffffffffe, 0x6, 0xbd32, 0x6, 0x6, 0xfffffffffffff7b7, 0x5, 0xa, 0x7, 0x1000, 0x3, 0x0, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 9m44.915672574s ago: executing program 1 (id=54): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x389) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r3}, 0x38) 9m41.351770433s ago: executing program 1 (id=61): r0 = open(0x0, 0x48141, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) lstat(0x0, &(0x7f00000039c0)) lstat(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000140)={&(0x7f00000000c0)=':\x00', &(0x7f0000000100)='\x00', 0x6}) socket$inet(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 9m40.58020133s ago: executing program 32 (id=61): r0 = open(0x0, 0x48141, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) lstat(0x0, &(0x7f00000039c0)) lstat(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000140)={&(0x7f00000000c0)=':\x00', &(0x7f0000000100)='\x00', 0x6}) socket$inet(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 9m8.463803875s ago: executing program 2 (id=119): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000c40)={[{@test_dummy_encryption_v1}, {@acl}, {@test_dummy_encryption_v1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) 9m4.420443722s ago: executing program 2 (id=124): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x389) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000780), 0x4, r3}, 0x38) 9m2.829733381s ago: executing program 2 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x2, 0x28, {0x28, 0x0, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9m0.828492517s ago: executing program 2 (id=131): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3JL1/wh/p1Pndzq/0zl+nzPP9/PZn1nPu/ez9trv8+733Xu9M/Ntl6E1G9eq1pCI4F+C538kA0AsAAwEgKsAIACA8vHl48+tzy0x+V/bCftzPZh2uUfALieuf87G9c/ZuP45G9c/Z+P652xc/5yN65+zcf0Zy8k2Tit0NS85d+H5/5yMP///i2SXGfPl6jLXdgWI+aMpXP+cjev/Xyv4Ixtx/XM2rn9OFXu5B8D+D+DzPyfI9XfXcP1zNq4/YznZv3+OWbnLPcf9Py0QydnfgVzu1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzhpL9EAcDF9uUeF2OMMcYYY4wxxv48PtflHgFjjDHGGGOMMcb+/RAESFAQQAzkgljIDXEgAOBKyAtXQQSuhni4BvLBtZAfCkBBKAQJUBiKgAYDFghCKArFIArXQXG4HkpASSgFpcFBGUiEG6As3Ajl4CYoDzdDBbgFKkIluBUqw21QBW6HqnAHVIM7oTrUgJpQC+6C2nA31IF7oC7cC/XgPqgP90MDeAAawoPQCB6CxvAwNIFHoCk0g+bQAlr+r/Kfhx7wAvSEXpAMvaEPvAh9oR/0hwEwEF6CQfAyDIZXIAWGwFB4FYbBazAcXocR8AaMhDdhFLwFo2EMjIVxkArjYQK8DRPhHZgEk2EKTIU0mAbT4V2YATNhFrwHs+F9mANzYR7Mh3T4ADJgAWTCh7AQPoIsWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFj2EbfALb4VPYATthF3wGu+HzfzL/xN/kd0VAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBByk1YFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYGStjFayCVbEqVsNqWB2rY02siXfhXdgb62AdrIt1sR7Wuzg9hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YLfv5XIAv4AvYC6uL3tgH+2BfTMnVHwfgAHwJB+HL+DK+gik4BIfiq/gqvobD8TiOwDdwJI7EKuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0zMAFmImZuBBPYBYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFL56sCgA/xZ24E1NwN+7GPbgH9+Je3If7MBuzcT/uxwMW8CAexEN4CA/jETyKR/AYHsPjeAJPYr8LXT2b8HWjT0quSgFxjhJKxIgYEStiRZyIE3lEHpFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESTCGAAQUREVxUVxUUKUEKVEKeGEE4kiUZQVZUU5UU6UFzeLCuIWUVFUEm1cZVFZVBFtXVVxh6gmqonqooaoKWqJWqK2qC3qiDqirqgr6ol6or64XzQQvbE/PijOVaaxGIJNxFBsKpoJeeFIWonh2Fq0EW3F4+INHIHtRSuXJJ4SHcRo7Cj+IsbgM6KzGIddxHOiq+gmuovnRQ/R2vUUvcQk7C36iKnYV/QT/cUAMQNriPdwdu6a4hWRIoaIoeJVMR9fE8PF62JEbxAjxZtilHhLjBZjxFgxTqSK8WKCeFtMFO+ISWKymCKmijQxTUwX74oZYqaYJd4Ts8X7Yo6YK+aJ+SJdfCAyxAKRKT4UC8VHIkssEovFErFULBPLxQqRG1aJ1WKNWCvWifVig9goNonNYovYKj4W28QnYrv4VOwQO8Uu8ZnYLT4Xe8QXYq/4UuwTX4ls8bXYL74RB8S34qD4ThwS34vD4og4Kn4Qx8SP4rg4IU6KU+K0+EmcET+Ls8ILkCiFlFLJQMbIXDJW5pZx8gqZRwYXnt2rZby8RuaT18r8soAsKAvJBFlYFpFaGmklyVAWlcVkVF4ni8vrZQlZUpaSpaWTZWSivEGWlTfKcvImWV7eLCvIW2RFWUneKivL22QVebuEyPl9VJc1ZE1ZS94lk+FuWUfeI+vKe2U9eZ+sL++XDeQDsqF8UDaSD8nG8mHZRD4im8pmsrlsIVvKR2Ur+ZhsLdvItvJx2U4+IdvLJ2WSfEp2kP7CS+QZ2Vk+K7vI52RX2U12lz/Ls9LLnrKXhN4g+8gXZV/ZT/aXA+RA+ZIcJF+Wg+UrMkUOkUPlq3KYfE0Ol6/LEfINOVK+KUfJt+RoOUaOleNkqhwvJ8i35UT5jpwkJ8spcqpMk9Nk/ws9zZLyH+a//Tv5g3/Z+wa5UW6Sm+UWuVV+LLfJT+R2uV3ukDvkLrlL7pa75R65R+6Ve+U+uU9myzvkfrlfHpAH5EF5UB6Sh+RheUSekj/IY/JHeVyekCfkKXlanpZnLjwHoFAJJZVSgYpRuVSsyq3i1BUqj7pS5VVXqYi6WsWra1Q+da3KrwqogqqQSlCFVRGllVFWkQpVUVVMRdV1F9+jVClVWjlVRiWqG/6ZfFVcXa9KqJK/yr84vuS/M76WqqVqpVqp1qq1aqvaqnaqnWqv2qsklaQ6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlklqz7qRdVX9VP91QA1UL2kBqlBarAarFJUihqqhqphapgaroarEWqEGqlGqlFqlBqtRquxaqxKValqgpqgJqqJapKapKaoKSpNpanparqaoWaoWWqWmq1mqzlqjpqn5ql0la4yVIbKVJlqoVqostQitUgtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5lqY1qo9qsNqutaqvaprap7Wq72qF2qF1ql9qtdqs9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqqj6pg6po6r4+qkOqlOq9PqjDqjzqqz5y77AhGIQAUqiAligtggNogL4oI8QZ4gb5A3iASRID6ID/IF1wb5gwJBwaBQkBAUDooEOjCBDcSFokeD64LiwfVBiaBkUCooHbigTJAY3BCUDW4MygU3BeWDm4MKwS1BxaBScGtQObgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEjwSNA2aBc2DFkHLP7V/748XeMz11L10su6t++gXdV/dT/fXA/RA/ZIepF/Wg/UrOkUP0UP1q3qYfk0P16/rEfoNPVK/qUfpt/RoPUaP1eN0qh6vJ+i39UT9jp6kJ+speqpO09P0dP2unqFn6ln6PT1bv6/n6Ll6np6v0/UHOkMv0Jn6Q71Qf6Sz9CK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1x3qb/kRv15/qHXqn3qU/07v153qP/kLv1V/qfforna2/1vv1N/qA/lYf1N/pQ/p7fVgf0Uf1D/qY/lEf1yf0SX1Kn9Y/6TP6Z31W+3MX9+c+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5DP5TH6T3xQ0BU2CSTBFTBFzDhkyRU1REzVRU9wUNyVMCVPKlDLOOJNoEk1ZU9aUM+VMeVPeVDAVTEVT0dxqbjW3mdvM7eZ2c4e5w9xp7jQ1TA1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3SSbJdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2ySTZ9TB/T1/Q1/U1/M9AMNIPMIDPYDDYpJsUMNUPNMDPMDDfDzQjzhhl57kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbDJNhMk2mWWgWmiyTZRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww128w2s91sNzvMDrPL7DK7zW6zx+wxe81es8/sM9km2+w3+80Bc8AcNAfNIXPIHDaHzVFz1Bwzx8xxc9ycNCfNaVPgwuelN7E2t42zV9g89kqb115l/zYuaAvZBFvYFrHa5rcFfhUba20JW9KWsqWts2Vsor3hN3FFW8neaivb22wVe7ut+pu4tr3b1rH32Lr2XlvL3vWruJ69z9a3D9sGiAC2mW1kW9jG9mHbxD5im9pmtrltYdvZJ2x7+6RNsk/ZDvbp38QZdoFdaVfZ1XaN3WF32pP2lD1gv7Wn7U+2p+1lB9qX7CD7sh1sX7Epdshv4pH2TTvKvmVH2zF2rB33m3iKnWrT7DQ73b5rZ9iZv4nT7Qd2ts20c+xcO8/O/yXOsGgz7Yd2of3IZtkAFtsldqldZpfbFf9/rEvsOrvebrDb7ad2s91it9qP7baLF8J2p91lP7O77ed2v/3G7rVf2n32oM22X/8Snzu+g/Y7e8h+bw/bI/ao/cEesz+qi9nnjv0H+7M9a70FQgKSpCigGMpFsZSb4ugKykNXUl66iiJ0NcXTNZSPrqX8VIAKUiFKoMJUhDQZskQUUlEqRlG6ji4OrxSVJkdlKJFuoLJ0I5Wjm6g83UwV6BaqSJVyX9iMbqeqdAdVozupOtWgmlSL7qLadDfVoXuoLt1L9eg+qk/3UwN6gBrSg9SIHqLG9DA1oUeoKTWj5tSCWtKj1Ioeo9bUhtrS49SOnqD29CQl0VPUgZ6mjvQX6kTPUGd6lrrQc9SVulF3ep560AvUk3pRMvWmPvQi9aV+1J8G0EB6iQbRyzSYXqEUGkJD6VUaRq/RcHqdRtAbNJLepFH0Fo2mMTSWxlEqjacJ9DZNpHdoEk2mKTSV0mgaTad3aQbNpFn0Hs2m92kOzaV5NJ/S6QPKoAWUSR/SQvqIsmgRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6mbfQJbadPaQftpF30Ge2mz2kPfUF76UvaR19RNn1N++kbOkDf0kH6zvei7+kwHaGj9AMdox/pOJ2gk3SKTtNPdIZ+prPkCUIMRShDFQZhTJgrjA1zh3HhFWGe8Mowb3hVGAmvDuPDa8J84bVh/rBAWDAsFCaEhcMioQ5NaEMKw7BoWCyMhteFxcPrwxJhybBUWDp0YZkwMbwhLBveGJYLbwrLhzeHFcJbwophpfDheyuHt4VVwtvDquEdYbXwzrB6WCOsGdYK7wprh3eHdcJ7wrrhvWG58L6wfnh/2CB8IGwYPhg2Ch8KG4cPh03CR8KmYbOwedgibBk+GrYKHwtbh23CtuHjYbvwibB9+GSYFD4Vdgif/mX9fQv+/vrksHfYJ3wxfDH0/h45Lzo/mh79IJoRXRDNjH4YXRj9KJoVXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b5WLnDohJNOucDFuFwu1uV2ce4Kl8dd6fK6q1zEXe3i3TUun7vW5XcFXEFXyCW4wq6I084468iFrqgr5qLuOlfcXe9KuJKulCvtnCvjEl0L19K1dK3cY661a+Pausfd4+4J94R70j3pnnId3NOuo/uL6+SecZ3ds+5Z95zr6rq57u5518ONz3v+ZEt2fVwf19f1df1dfzfQDXSD3CA32A12KS7FDXVD3TA3zA13w90IN8KNdCPd3QpgtBvtxrqxLtWluglugpvoJrpJbpKb4qa4NJfmprvpboab4arMPL+XOW6Om+fmuXSX7jLcuWvGTLfQLXRZLsstdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W1z29x2t93t8Fed79TtdnvcHrfX7XX73Fcu233t9rtv3AH3rTvovnOH3PfusDvijrof3DH3ozvuTriT7pQ77X5yZ9zP7qzzLjUyPjIh8nZkYuSdyKTI5MiUyNRIWmRaZHrk3ciMyMzIrMh7kdmR9yNzInMj8yLzI+mRDyIZkQWRzMiHkYWRjyJZkUWRxZElkaWRZRHvC28OfVFfzEf9db64v96X8CV9KV/aO1/GJ/obfFl/oy/nb/Ll/c2+gr/FV/SV/K3+Ed/UN/PNfQvf0j/qW/nHfGvfxrf1j/t2/gnf3j/pk/xTvoN/2nf0f/Gd/DO+s3/Wd/HP+a6+m+/un/c9/Au+p+/lk31v38e/6Pv6fr6/H+AH+pf8IP+yH+xf8Sl+iB/qX/XD/Gt+uH/dj/Bv+JExb/pRF2+RYZxP9eP9BP+2n+jf8ZP8ZD/FT/Vpfpqf7t/1M/xMP8u/52f79/0cP9fP8/N9uv/AZ/gFPtN/6Bf6j3yWX3RxUtkv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+Y/8dv9p36H3+l3+c/8bv+53+O/8Hv9l36f/8pn+6/9fv+NP+C/9Qf9d/6Q/94f9kf8Uf+DP+Z/9Mf9CX/Sn/Kn/U/+jP/Zn+W/WWOMMcYY+0PGX2qKX685P53f+3dyxF9t3AcArtxSKPuv15+7olyb/3y7n0hoFwGAp3p1efDiUr16cnLyhW2zJATF5gJc/CbonBi4FC+CtvAEJEEbKPu74+8nup2mf9B/9GaAuL/KiYVL8aX+vwDA5N/p/9HHR2ZUCE/G/w/9zwUoUexSTm64FC+Ctr/Mr7SBcn9n/AVa/YPx5/4yFaD1X+XkgUvxpfEnwmPwNCT9akvGGGOMMcYYY+y8fuLWThfvPy/+xufv3Z8nqEs5ueBS/I/uzxljjDHGGGOMMXb5PdOt+5OPJiW16fTPN6r+r7L+cKMJ/Lt65sbvNrwHuPiIAoB/sUOAcw35nzyKTf+RfaVcOHX+dtXSUz6A/xul/DMal/mNiTHGGGOMMfanu3TR/+vH1eUaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9J/6d2OU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+38BAAD//3lG9tE=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) truncate(&(0x7f00000000c0)='./file1\x00', 0x7) 8m59.243913096s ago: executing program 2 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x3d99b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8m58.318445534s ago: executing program 0 (id=136): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x5}, {0x8, 0xfff2}}}, 0x24}}, 0x24000814) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m58.206719154s ago: executing program 0 (id=137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 8m58.067774769s ago: executing program 0 (id=138): unshare(0x20000400) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000380)=ANY=[], 0x1, 0x694, &(0x7f0000000a80)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x6002, 0x2) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x4000000000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280080, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') mkdirat(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="2b696f202002"], 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000300)={0x0, 0x0, 0x58000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) recvmmsg(r6, 0x0, 0x0, 0xfc0, 0x0) renameat2(r2, 0x0, r2, &(0x7f0000000200)='./bus\x00', 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000), 0x0, 0x0, 0x2) 8m57.329576901s ago: executing program 2 (id=139): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400e890) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getgid() getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001900)={{{@in6=@private1, @in6=@dev}}, {{@in6=@local}, 0x0, @in=@private}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 8m56.54597816s ago: executing program 33 (id=139): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400e890) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getgid() getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001900)={{{@in6=@private1, @in6=@dev}}, {{@in6=@local}, 0x0, @in=@private}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 8m52.934867743s ago: executing program 0 (id=143): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) truncate(&(0x7f00000000c0)='./file1\x00', 0x7) 8m50.75129205s ago: executing program 0 (id=144): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) pread64(r0, &(0x7f0000000040)=""/27, 0x1b, 0x5) 8m48.470960168s ago: executing program 0 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 8m48.017849235s ago: executing program 34 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 8m1.435172923s ago: executing program 4 (id=224): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x8000000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m58.949871532s ago: executing program 4 (id=226): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x75, 0x0, 0xe000, 0x9, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x61, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x100, @void}, "e1715b80363a02f0c137397a3ab498cf34cc25b73d1159b6ca297434a0b728a9ce79380bac185d726fd37aebd370c3670a8088259941eaa285a3c730a30fded2dc543737a9dd15a022279fff4b7dd8b595499d67a3"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f00000000c0)={@rand_addr=' \x01\x00', @broadcast, 0x0, 0x1a}}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000380)) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @local, 0xa}, 0x1c) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x3) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000040)=0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c460408000304000000000000"], 0x258) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 7m50.691873536s ago: executing program 4 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xa03, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x40) 7m49.84788548s ago: executing program 4 (id=230): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$eJzs3V9oVuUfAPDveffH/eb8bb9fUeLVSjBD3JyvSwQDvRKkhDQoqIuGezen71TchLaL6A+UUYHeeJMEdVEQXqyr6ibCi6gIuvAmKLwoiBxMyyK8CBbn/bOme7c5pzu6Ph84nOc55z3n+b7v43ne83w97A3gX6s9InZERF1EbIqI1sr2XGWJF8tL+rpCfuxAuiQxObnvchJJROzOjx2oniuprFdWTtAUEee+iGiun9nu0MjooZ5isXCsUu8cHjzaOTQyunFgsKe/0F84nO/ams/nu7flu2/Ze/3tr4OnPrm66/XTl3795qfzH59NYke0VPZNfx+3Snu0T30m09UnEY/e6sYy1pR1ACzY2cdPvZV1DADA0kvv8f8fEQ+W7v9boy7KN+sHx5+90hpX+mY7ru3Pdy4uZZwAAADAzZuM1tiermtqmHUPAAAAcPfIRURLJLmOyrMALZHLdXSUn+G9N5pzxSNDwxv6jhw/3BulZ2XboiHXN1AsVJ8VbouGJK13lcr/1DdfV89HxP8i4kTrf0r1jv1Hir1ZJz8AAABgmWuJuPDMK5/ev3KW+X/qh9asowQAAAAWI53/r7rQXPpTXX+Y5wMAAMCylM7/r7x66asw/wcAAIBlqzr/n/odLoXbWKj+ANqdEo+CwnyFjAcoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqGFyMolJAAAAYFnLOv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDdZXd+7EB1Wao2x3ctVUvMZmJnRLSV+79QWcp76qOptG6Khoho/j2J+mnHJRFRt8i2O9ZFtMeG706+8MtH6RKVf4eLPC13ibEfs46A261+jn2NW5YwEO44a57IOgKy9O2JrCMgS+cnso6ALO3dl3UEZGnPI1lHQJbevpx1BHy+MyI21cr/5WJ1aV3OAl2f/6mbZ253I74+E9EeHT9P3zYz/5MbX2QzzGFiZ8T2iCjMyP/lqi9pq6vUVpVShQ1J30CxsCki/hsR66NhRVrvmqON3avP1cz0vHlf2v/H91Tzf+mStl/NBVbiGK9fce1xvT3DPYt935RNvBSxpr5W/ydT+d9klvzvihtrIj1ssNaOq1+m/f/GZ3P3P7fT5LsRD9W8/pOp16SlzuHBo51DI6MbBwZ7+gv9hcP5rq35fL57W767szQedFZHhZk+fPn9mt/0D+wvjf8j+j876fXfPHf/l8b/oZHRQz3FYuHY0MLbeG3d6Zrf4R+cTvu/8dzNjP+NyZOlABsr257vGR4+1hXRmDw2c/vmhce8XFU/j+rnlfb/+rW1v/+r93/l8T83Y/y/p7LOlf8LcVYPv3ex5vbvT6b9n3/K9Z+dtP9757n+k2uu/4UXnlu7d32ttp+O0v3fmfmv/y2lYKoncf83vxvtoKzjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6f4OAAD//1/T7bc=") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\v\x00'], 0x50) rename(&(0x7f0000000180)='./file1\x00', 0x0) sendmsg$nl_route(r0, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m49.247137636s ago: executing program 4 (id=231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m44.682646418s ago: executing program 4 (id=232): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m44.245229184s ago: executing program 35 (id=232): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m49.233106286s ago: executing program 6 (id=568): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00032e0000002e03"]}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 3m47.158224237s ago: executing program 6 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="1400000042000102"], 0x14}}, 0x40804) 3m45.526380758s ago: executing program 6 (id=575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x38, 0x3c, 0x0, @dev, @local, {[@hopopts={0x0, 0x5, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x81, 0x0, [0x7]}}]}]}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000240)={[{@cpuset_v2_mode}]}) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xfffffffffffffddd, 0x0, 0x1}, 0x28) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000040)=0x6, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 3m42.916338302s ago: executing program 6 (id=576): bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006a80)=[{{&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x0}}], 0x1, 0x2000c805) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x701, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000163, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x2, 0x6, '\x00', 0x8001}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x50000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m42.148956981s ago: executing program 6 (id=578): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa0009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="510f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2041}}, 0x0, 0x0}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x15, 0x4, "a185b00a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m39.005492642s ago: executing program 6 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000005f0ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3m38.820616972s ago: executing program 3 (id=585): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x75, 0x0, 0xe000, 0x9, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x61, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x100, @void}, "e1715b80363a02f0c137397a3ab498cf34cc25b73d1159b6ca297434a0b728a9ce79380bac185d726fd37aebd370c3670a8088259941eaa285a3c730a30fded2dc543737a9dd15a022279fff4b7dd8b595499d67a3"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f00000000c0)={@rand_addr=' \x01\x00', @broadcast, 0x0, 0x1a}}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000380)) socket$inet6(0xa, 0x2, 0x3a) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x3) 3m33.684633682s ago: executing program 3 (id=586): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000580)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad90e59066321a54e7df30", 0x48, 0x40001, 0x0, 0x0) 3m33.380351703s ago: executing program 3 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181b01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000d80)) 3m33.170509248s ago: executing program 3 (id=588): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x400080, 0x493d19c3, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)='S', 0x1}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m33.107523446s ago: executing program 3 (id=589): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3m32.155748792s ago: executing program 3 (id=590): getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x801, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3062c}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_BROADCAST={0xa}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x7, 0x237c4d13, 0x2, 0x7, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xaa, 0x7, 0x7, 0x1, 0x6, 0x4}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x50) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0x42000040) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES16], 0x30}}, 0xad48e3952cdd0b8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$inet6(0xa, 0x80003, 0xff) linkat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x400) 3m23.092973389s ago: executing program 36 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000005f0ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3m17.113317109s ago: executing program 37 (id=590): getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x801, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3062c}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_BROADCAST={0xa}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x7, 0x237c4d13, 0x2, 0x7, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xaa, 0x7, 0x7, 0x1, 0x6, 0x4}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x50) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0x42000040) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES16], 0x30}}, 0xad48e3952cdd0b8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$inet6(0xa, 0x80003, 0xff) linkat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x400) 4.007665871s ago: executing program 5 (id=725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 3.148160961s ago: executing program 5 (id=726): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000001000)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="441094161381071b47161e1803edb3cd75b7e414faaf085b84735e696a1d1924faa996624c7f8d1688dac7868b3ecf3ddfa96126bc1d547a0d21dcab8e4f8fa082932f07bff017e9b6cdbbd7627375a37b80274e1636a24214cfdf8950e834e1a29f990b5211216b6efa4a0c68c437e43fe8463ee4958ebaa353987bf0002a9d870fa1cd2c7608bb2c50fc9ee178efae9415c23dae0b9da24cde81e3a1f5a8b129e0b244c5c0dc904ae77fd4bd9d7cb17cb9f961825541213fec17f6e5ba8688a9152e7707d1fdd6efdcd8fb649aecd64575fcb9ecc024f1c90a5b91a1368a63dc069b8d983e5d7a59c3d54a74e750f1", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16=r1], 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI") ftruncate(r1, 0xf4ff) 2.634152267s ago: executing program 5 (id=727): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ec) 1.54319596s ago: executing program 5 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129180, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0x4018aee2, &(0x7f00000043c0)) 1.215898812s ago: executing program 5 (id=729): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r3 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=730): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200)={'netpci0', 0x32, 0x39}, 0xa) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FIBMAP(r1, 0x1, &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): m. [ 519.483516][ T8883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.691450][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.691463][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.691480][ T8883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.800579][ T8862] hsr_slave_0: entered promiscuous mode [ 519.801923][ T8862] hsr_slave_1: entered promiscuous mode [ 519.802996][ T8862] debugfs: 'hsr0' already exists in 'hsr' [ 519.803021][ T8862] Cannot create hsr debugfs directory [ 519.932451][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.990209][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.990222][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.990239][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.003119][ T8834] hsr_slave_0: entered promiscuous mode [ 520.005192][ T8834] hsr_slave_1: entered promiscuous mode [ 520.009085][ T8834] debugfs: 'hsr0' already exists in 'hsr' [ 520.009110][ T8834] Cannot create hsr debugfs directory [ 520.069262][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.069274][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.069291][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.349300][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.393079][ T8883] hsr_slave_0: entered promiscuous mode [ 520.394965][ T8883] hsr_slave_1: entered promiscuous mode [ 520.397128][ T8883] debugfs: 'hsr0' already exists in 'hsr' [ 520.397155][ T8883] Cannot create hsr debugfs directory [ 520.493523][ T8793] netdevsim netdevsim7 eth12 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 520.776840][ T8889] hsr_slave_0: entered promiscuous mode [ 520.778716][ T8889] hsr_slave_1: entered promiscuous mode [ 520.779874][ T8889] debugfs: 'hsr0' already exists in 'hsr' [ 520.779900][ T8889] Cannot create hsr debugfs directory [ 520.921945][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.042251][ T8793] netdevsim netdevsim7 eth11 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 521.434646][ T8793] netdevsim netdevsim7 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 521.893488][ T8793] netdevsim netdevsim7 eth9 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 522.115686][ T57] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 20002 - 0 [ 522.229987][ T57] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 20002 - 0 [ 522.469551][ T57] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 20002 - 0 [ 522.634571][ T158] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 20002 - 0 [ 522.766285][ T48] bridge_slave_1: left allmulticast mode [ 522.766324][ T48] bridge_slave_1: left promiscuous mode [ 522.766662][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.867136][ T48] bridge_slave_0: left allmulticast mode [ 522.867167][ T48] bridge_slave_0: left promiscuous mode [ 522.867367][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.086285][ T48] bridge_slave_1: left allmulticast mode [ 523.086315][ T48] bridge_slave_1: left promiscuous mode [ 523.086507][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.188061][ T48] bridge_slave_0: left allmulticast mode [ 523.188099][ T48] bridge_slave_0: left promiscuous mode [ 523.188414][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.407214][ T48] bridge_slave_1: left allmulticast mode [ 523.407267][ T48] bridge_slave_1: left promiscuous mode [ 523.407695][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.527757][ T48] bridge_slave_0: left allmulticast mode [ 523.527980][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.976762][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.076780][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.160592][ T48] bond0 (unregistering): Released all slaves [ 524.386749][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.486740][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.568216][ T48] bond0 (unregistering): Released all slaves [ 525.128114][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.207094][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.229774][ T48] bond0 (unregistering): Released all slaves [ 526.183114][ T5254] 8021q: adding VLAN 0 to HW filter on device eth12 [ 528.056174][ T48] hsr_slave_0: left promiscuous mode [ 528.076107][ T48] hsr_slave_1: left promiscuous mode [ 528.077171][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.116991][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.306174][ T48] hsr_slave_0: left promiscuous mode [ 528.326202][ T48] hsr_slave_1: left promiscuous mode [ 528.329528][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.367388][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.506166][ T48] hsr_slave_0: left promiscuous mode [ 528.526225][ T48] hsr_slave_1: left promiscuous mode [ 528.527401][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.527420][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.566965][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.566985][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.647495][ T48] veth1_macvtap: left promiscuous mode [ 528.647565][ T48] veth0_macvtap: left promiscuous mode [ 528.647754][ T48] veth1_vlan: left promiscuous mode [ 528.647879][ T48] veth0_vlan: left promiscuous mode [ 529.196675][ T48] team0 (unregistering): Port device team_slave_1 removed [ 529.247281][ T48] team0 (unregistering): Port device team_slave_0 removed [ 529.706648][ T48] team0 (unregistering): Port device team_slave_1 removed [ 529.756749][ T48] team0 (unregistering): Port device team_slave_0 removed [ 530.348718][ T48] team0 (unregistering): Port device team_slave_1 removed [ 530.389337][ T48] team0 (unregistering): Port device team_slave_0 removed [ 530.597632][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 530.646359][ T8793] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 530.699191][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.716771][ T8793] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 530.790467][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.839711][ T8793] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 530.891277][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.074147][ T8793] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 531.187504][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.506339][ T8862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.643897][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.646530][ T8862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.682391][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.703165][ T8862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.792329][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.845207][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10 [ 531.845546][ T8862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.897838][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.213096][ T8889] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 532.820925][ T8889] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 533.036217][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.412327][ T8889] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 533.481838][ T5254] 8021q: adding VLAN 0 to HW filter on device eth11 [ 533.500411][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.520809][ T8862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.545387][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.545540][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.583830][ T1948] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.583986][ T1948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.844017][ T8889] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 533.929070][ T8862] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.957628][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.957853][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.999723][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.999897][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.028633][ T8834] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.095338][ T8834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.130904][ T8834] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 535.229291][ T8834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.283954][ T8834] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 535.374074][ T8834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.419734][ T8834] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 535.464924][ T8834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.533227][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.826299][ T48] bridge_slave_1: left allmulticast mode [ 535.826340][ T48] bridge_slave_1: left promiscuous mode [ 535.826769][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.947148][ T48] bridge_slave_0: left allmulticast mode [ 535.947174][ T48] bridge_slave_0: left promiscuous mode [ 535.947371][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.346761][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.427058][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.487674][ T48] bond0 (unregistering): Released all slaves [ 536.769590][ T8862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.978339][ T8883] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 537.013112][ T8883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.146110][ T48] hsr_slave_0: left promiscuous mode [ 537.186176][ T48] hsr_slave_1: left promiscuous mode [ 537.187276][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.208593][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.626688][ T48] team0 (unregistering): Port device team_slave_1 removed [ 537.678634][ T48] team0 (unregistering): Port device team_slave_0 removed [ 537.880921][ T8883] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 537.912425][ T8883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.939999][ T8883] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 537.994210][ T8883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.021441][ T8883] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 538.050026][ T8883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.694517][ T8889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 538.763466][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.844301][ T8889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 538.869658][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.934535][ T8889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 538.959742][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.975425][ T8889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 538.999848][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.031168][ T8793] veth0_vlan: entered promiscuous mode [ 539.194170][ T8793] veth1_vlan: entered promiscuous mode [ 539.198765][ T8862] veth0_vlan: entered promiscuous mode [ 539.259636][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.299412][ T8862] veth1_vlan: entered promiscuous mode [ 539.422681][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.497549][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.497821][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.508988][ T8793] veth0_macvtap: entered promiscuous mode [ 539.578005][ T1948] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.578177][ T1948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.590092][ T8793] veth1_macvtap: entered promiscuous mode [ 539.640220][ T8883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.719957][ T8862] veth0_macvtap: entered promiscuous mode [ 539.774828][ T8862] veth1_macvtap: entered promiscuous mode [ 539.931037][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.949394][ T8883] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.014339][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.054166][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.054510][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.092081][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.183505][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.194908][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.230423][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.230699][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.304244][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.322388][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.353670][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.370173][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.528370][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.606582][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.612991][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.621358][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.722461][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.875740][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.877022][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.228795][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.228997][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.809178][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.809199][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.860744][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.860768][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.218875][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.218898][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.795467][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.978524][ T9215] loop5: detected capacity change from 0 to 8192 [ 545.795307][ T4908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 545.871468][ T4908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 545.922954][ T4908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 545.997875][ T4908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.020253][ T4908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.305145][ T9092] Flush: task=udevd[9092] dev=loop5 state=2 [ 546.698927][ T9092] Teardown: task=udevd[9092] dev=loop5 state=2 [ 548.880526][ T5606] Bluetooth: hci1: command tx timeout [ 550.899525][ T5606] Bluetooth: hci1: command tx timeout [ 551.482761][ T4908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 551.534128][ T4908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 551.539554][ T4908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 551.559975][ T4908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 551.561937][ T4908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 551.811693][ T8579] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.334498][ T8883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.405012][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.677616][ T8579] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.976976][ T4908] Bluetooth: hci1: command tx timeout [ 553.335188][ T8579] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.856670][ T4908] Bluetooth: hci0: command tx timeout [ 553.863688][ T8579] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.851507][ T8889] veth0_vlan: entered promiscuous mode [ 555.058450][ T4908] Bluetooth: hci1: command tx timeout [ 555.528823][ T2955] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 555.743654][ T8889] veth1_vlan: entered promiscuous mode [ 555.839695][ T9343] syzkaller0: entered promiscuous mode [ 555.839724][ T9343] syzkaller0: entered allmulticast mode [ 555.875530][ T9346] tipc: Started in network mode [ 555.875589][ T9346] tipc: Node identity deae4760c5fe, cluster identity 4711 [ 555.895202][ T9346] tipc: Enabled bearer , priority 0 [ 555.895298][ T8576] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 555.936525][ T4908] Bluetooth: hci0: command tx timeout [ 555.986699][ T9340] tipc: Resetting bearer [ 556.132167][ T9340] tipc: Disabling bearer [ 556.497739][ T8576] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 556.764441][ T8883] veth0_vlan: entered promiscuous mode [ 556.773827][ T158] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 557.055488][ T8579] bridge_slave_1: left allmulticast mode [ 557.055531][ T8579] bridge_slave_1: left promiscuous mode [ 557.055883][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.189230][ T8579] bridge_slave_0: left allmulticast mode [ 557.189259][ T8579] bridge_slave_0: left promiscuous mode [ 557.189460][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.019302][ T4908] Bluetooth: hci0: command tx timeout [ 558.167546][ T8579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.247146][ T8579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.274395][ T8579] bond0 (unregistering): Released all slaves [ 558.600627][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.600978][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.601305][ T9207] bridge_slave_0: entered allmulticast mode [ 558.609775][ T9207] bridge_slave_0: entered promiscuous mode [ 558.647461][ T8883] veth1_vlan: entered promiscuous mode [ 558.670784][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.677279][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.677611][ T9207] bridge_slave_1: entered allmulticast mode [ 558.723456][ T9207] bridge_slave_1: entered promiscuous mode [ 560.096108][ T4908] Bluetooth: hci0: command tx timeout [ 560.130148][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.445495][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.747502][ T8889] veth0_macvtap: entered promiscuous mode [ 561.062685][ T9421] loop5: detected capacity change from 0 to 1024 [ 561.886610][ T9421] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 561.917614][ T9421] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 561.923388][ T9421] EXT4-fs (loop5): orphan cleanup on readonly fs [ 561.976052][ T9421] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 561.976234][ T9421] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 561.976309][ T9421] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.606: Failed to acquire dquot type 0 [ 561.976334][ T9421] loop5: lost filesystem error report for type 5 error -117 [ 561.977431][ T9421] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 561.977594][ T9421] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 561.977655][ T9421] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.606: Failed to acquire dquot type 0 [ 561.977678][ T9421] loop5: lost filesystem error report for type 5 error -117 [ 561.979525][ T9421] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.606: Freeing blocks not in datazone - block = 0, count = 4096 [ 561.979558][ T9421] loop5: lost filesystem error report for type 5 error -117 [ 561.984548][ T9421] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 561.984717][ T9421] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 561.984782][ T9421] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.606: Failed to acquire dquot type 0 [ 561.984807][ T9421] loop5: lost filesystem error report for type 5 error -117 [ 561.994255][ C1] EXT4-fs (loop5): error count since last fsck: 4 [ 561.994278][ C1] EXT4-fs (loop5): initial error at time 1784308276: ext4_acquire_dquot:7041 [ 561.994297][ C1] EXT4-fs (loop5): last error at time 1784308276: ext4_acquire_dquot:7041 [ 562.733680][ T9421] EXT4-fs (loop5): 1 orphan inode deleted [ 562.794344][ T9421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.504156][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.609087][ T9207] team0: Port device team_slave_0 added [ 564.611725][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 564.689647][ T9207] team0: Port device team_slave_1 added [ 564.692407][ T8889] veth1_macvtap: entered promiscuous mode [ 564.696896][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 565.069633][ T9447] loop5: detected capacity change from 0 to 128 [ 565.117981][ T9447] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 565.118015][ T9447] FAT-fs (loop5): data area starts beyond volume (33 > 0) [ 565.118033][ T9447] FAT-fs (loop5): Can't find a valid FAT filesystem [ 565.252879][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.272281][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.285405][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.329916][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.330780][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.446973][ T9042] Flush: task=udevd[9042] dev=loop5 state=2 [ 565.557461][ T9042] Teardown: task=udevd[9042] dev=loop5 state=2 [ 565.789037][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.789056][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.789086][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.892410][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.892428][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.892459][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.910914][ T9459] loop5: detected capacity change from 0 to 1024 [ 565.922580][ T9459] EXT4-fs: Ignoring removed bh option [ 566.021442][ T9459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.060238][ T8579] hsr_slave_0: left promiscuous mode [ 566.104616][ T8579] hsr_slave_1: left promiscuous mode [ 566.108471][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.108497][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.160532][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.160564][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.221833][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.282800][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 566.332174][ T8579] veth1_macvtap: left promiscuous mode [ 566.332306][ T8579] veth0_macvtap: left promiscuous mode [ 566.332641][ T8579] veth1_vlan: left promiscuous mode [ 566.332870][ T8579] veth0_vlan: left promiscuous mode [ 566.361853][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 566.428691][ T9465] kvm [9464]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x8 [ 567.456249][ T4908] Bluetooth: hci2: command tx timeout [ 567.471246][ T8579] team0 (unregistering): Port device team_slave_1 removed [ 567.516590][ T8579] team0 (unregistering): Port device team_slave_0 removed [ 567.969369][ T9475] loop5: detected capacity change from 0 to 16 [ 568.195242][ T9475] erofs (device loop5): mounted with root inode @ nid 36. [ 568.261252][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.261371][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.435215][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.435571][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.450315][ T9258] bridge_slave_0: entered allmulticast mode [ 568.486101][ T9258] bridge_slave_0: entered promiscuous mode [ 568.532799][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.533244][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.533534][ T9258] bridge_slave_1: entered allmulticast mode [ 568.541767][ T9258] bridge_slave_1: entered promiscuous mode [ 568.616105][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 568.713041][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 568.960637][ T9207] hsr_slave_0: entered promiscuous mode [ 568.963229][ T9207] hsr_slave_1: entered promiscuous mode [ 568.965501][ T9207] debugfs: 'hsr0' already exists in 'hsr' [ 568.965529][ T9207] Cannot create hsr debugfs directory [ 568.969972][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.037749][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.104379][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.303686][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.547560][ T4908] Bluetooth: hci2: command tx timeout [ 569.648383][ T9258] team0: Port device team_slave_0 added [ 569.748470][ T9258] team0: Port device team_slave_1 added [ 570.010730][ T8576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.125701][ T9494] loop5: detected capacity change from 0 to 512 [ 570.190046][ T8576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.264739][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.264757][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.264783][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.337535][ T9494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.342031][ T9494] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.344477][ T8576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.401663][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.401676][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.401715][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.483549][ T8576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.973018][ T38] audit: type=1800 audit(1784308285.138:29): pid=9494 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.618" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 571.223516][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.261328][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.263622][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.279271][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.282260][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 571.581306][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.617428][ T4908] Bluetooth: hci2: command tx timeout [ 571.754430][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 571.866313][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 572.317092][ T9258] hsr_slave_0: entered promiscuous mode [ 572.318504][ T9258] hsr_slave_1: entered promiscuous mode [ 572.319584][ T9258] debugfs: 'hsr0' already exists in 'hsr' [ 572.319610][ T9258] Cannot create hsr debugfs directory [ 573.438056][ T9207] netdevsim netdevsim7 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 573.519104][ T9533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.621'. [ 573.536127][ T4908] Bluetooth: hci3: command tx timeout [ 573.696099][ T4908] Bluetooth: hci2: command tx timeout [ 573.761329][ T9543] loop5: detected capacity change from 0 to 256 [ 573.762516][ T9543] exfat: Deprecated parameter 'utf8' [ 573.762710][ T9543] exfat: Deprecated parameter 'namecase' [ 573.822478][ T9543] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 574.402185][ T9207] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 575.009249][ T9207] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 575.054156][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 575.139548][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 575.288575][ T9572] loop5: detected capacity change from 0 to 1024 [ 575.314076][ T9572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.314108][ T9572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.314126][ T9572] EXT4-fs: inline encryption not supported [ 575.314147][ T9572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.442833][ T9572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.442972][ T9572] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.619596][ T4908] Bluetooth: hci3: command tx timeout [ 575.805848][ T9577] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.624: bg 0: block 112: padding at end of block bitmap is not set [ 575.890858][ T9577] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 32 with error 28 [ 575.890899][ T9577] EXT4-fs (loop5): This should not happen!! Data will be lost [ 575.890899][ T9577] [ 575.890915][ T9577] EXT4-fs (loop5): Total free blocks count 0 [ 575.890930][ T9577] EXT4-fs (loop5): Free/Dirty block details [ 575.890988][ T9577] EXT4-fs (loop5): free_blocks=0 [ 575.891031][ T9577] EXT4-fs (loop5): dirty_blocks=32 [ 575.891044][ T9577] EXT4-fs (loop5): Block reservation details [ 575.891057][ T9577] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 575.944545][ T9207] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 576.034451][ T9572] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.624: lblock 0 mapped to illegal pblock 0 (length 4) [ 576.105259][ T9572] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 576.237056][ T8577] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 576.294232][ T8862] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 576.395348][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 576.481925][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 576.564277][ T8577] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 576.770947][ T2955] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 577.128641][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.129199][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.129456][ T9449] bridge_slave_0: entered allmulticast mode [ 577.133321][ T9449] bridge_slave_0: entered promiscuous mode [ 577.188991][ T8577] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 577.191118][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.191562][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.191903][ T9449] bridge_slave_1: entered allmulticast mode [ 577.206876][ T9449] bridge_slave_1: entered promiscuous mode [ 577.530580][ T9449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.574881][ T9449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.699765][ T4908] Bluetooth: hci3: command tx timeout [ 577.936210][ T9615] loop5: detected capacity change from 0 to 512 [ 578.031403][ T9615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.031551][ T9615] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.135073][ T9615] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.626: corrupted xattr block 33: overlapping e_value [ 578.319521][ T9449] team0: Port device team_slave_0 added [ 578.441241][ T9615] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.626: corrupted xattr block 33: overlapping e_value [ 578.643460][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.750581][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 578.843978][ T9449] team0: Port device team_slave_1 added [ 578.848166][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 579.263079][ T9642] create_pit_timer: 7 callbacks suppressed [ 579.263103][ T9642] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 579.263568][ T9642] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 579.263896][ T9642] kvm: requested 37714 ns i8254 timer period limited to 200000 ns [ 579.264299][ T9642] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 579.264710][ T9642] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 579.265137][ T9642] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 579.265451][ T9642] kvm: requested 20952 ns i8254 timer period limited to 200000 ns [ 579.265880][ T9642] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 579.270796][ T9642] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 579.271077][ T9642] kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 579.475064][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.475084][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.475113][ T9449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.515147][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.515164][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.515189][ T9449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.780595][ T4908] Bluetooth: hci3: command tx timeout [ 579.919302][ T9658] loop5: detected capacity change from 0 to 16 [ 579.976172][ T9658] erofs (device loop5): invalid ishare xattr prefix id 0 [ 579.978850][ T9042] Flush: task=udevd[9042] dev=loop5 state=2 [ 580.088574][ T9042] Teardown: task=udevd[9042] dev=loop5 state=2 [ 580.273510][ T9449] hsr_slave_0: entered promiscuous mode [ 580.275855][ T9449] hsr_slave_1: entered promiscuous mode [ 580.278305][ T9449] debugfs: 'hsr0' already exists in 'hsr' [ 580.278331][ T9449] Cannot create hsr debugfs directory [ 580.340949][ T9501] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.341364][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.341696][ T9501] bridge_slave_0: entered allmulticast mode [ 580.345453][ T9501] bridge_slave_0: entered promiscuous mode [ 580.370215][ T9501] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.370561][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.370827][ T9501] bridge_slave_1: entered allmulticast mode [ 580.374344][ T9501] bridge_slave_1: entered promiscuous mode [ 580.661903][ T9501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.766263][ T8579] bridge_slave_1: left allmulticast mode [ 580.766304][ T8579] bridge_slave_1: left promiscuous mode [ 580.769750][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.868369][ T8579] bridge_slave_0: left allmulticast mode [ 580.868409][ T8579] bridge_slave_0: left promiscuous mode [ 580.868735][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.066344][ T8579] bridge_slave_1: left allmulticast mode [ 581.066384][ T8579] bridge_slave_1: left promiscuous mode [ 581.066720][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.188268][ T8579] bridge_slave_0: left allmulticast mode [ 581.188308][ T8579] bridge_slave_0: left promiscuous mode [ 581.188612][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.603603][ T9663] loop5: detected capacity change from 0 to 131072 [ 581.620988][ T9663] F2FS-fs (loop5): invalid crc value [ 581.648361][ T9663] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 581.649373][ T9663] loop5: lost filesystem error report for type 5 error -117 [ 581.876123][ T9663] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 581.923686][ T9663] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 582.469369][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 582.527172][ T8579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.556302][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 582.607150][ T8579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.655485][ T8579] bond0 (unregistering): Released all slaves [ 583.262151][ T9672] loop5: detected capacity change from 0 to 8192 [ 583.396676][ T8579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.477435][ T8579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.518686][ T8579] bond0 (unregistering): Released all slaves [ 583.553169][ T9501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.145443][ T8862] do_umount: task=syz-executor[8862] propagate_mount_busy()!=0 [ 584.145774][ T8862] do_umount: task=syz-executor[8862] propagate_mount_busy()!=0 [ 584.279362][ T9501] team0: Port device team_slave_0 added [ 584.337242][ T9501] team0: Port device team_slave_1 added [ 584.593652][ T8862] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 584.593680][ T8862] FAT-fs (loop5): Filesystem has been set read-only [ 584.624684][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 584.686682][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 584.796323][ T8579] hsr_slave_0: left promiscuous mode [ 584.872909][ T8579] hsr_slave_1: left promiscuous mode [ 584.881130][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.925308][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.156779][ T8579] hsr_slave_0: left promiscuous mode [ 585.199771][ T8579] hsr_slave_1: left promiscuous mode [ 585.202833][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.248981][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.638995][ T8579] veth1_vlan: left promiscuous mode [ 585.656236][ T8579] veth0_vlan: left promiscuous mode [ 587.088132][ T8579] team0 (unregistering): Port device team_slave_1 removed [ 587.126952][ T8579] team0 (unregistering): Port device team_slave_0 removed [ 590.679327][ T8579] team0 (unregistering): Port device team_slave_1 removed [ 590.739663][ T8579] team0 (unregistering): Port device team_slave_0 removed [ 591.198939][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.198958][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.198986][ T9501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.237778][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.237797][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.237823][ T9501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.789078][ T9732] loop5: detected capacity change from 0 to 1024 [ 591.824416][ T9732] EXT4-fs (loop5): Invalid log cluster size: 32 [ 591.953597][ T9501] hsr_slave_0: entered promiscuous mode [ 591.964490][ T9501] hsr_slave_1: entered promiscuous mode [ 591.969982][ T9501] debugfs: 'hsr0' already exists in 'hsr' [ 591.970009][ T9501] Cannot create hsr debugfs directory [ 591.973608][ T9042] Flush: task=udevd[9042] dev=loop5 state=2 [ 591.973676][ T9207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 592.053363][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.071986][ T9207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 592.120011][ T9042] Teardown: task=udevd[9042] dev=loop5 state=2 [ 592.154819][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.263293][ T9207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 592.322605][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.504407][ T9207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 592.539982][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.100826][ T9258] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 593.151976][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.277211][ T9258] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 593.312757][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.501465][ T9449] netdevsim netdevsim9 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 593.775746][ T9258] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 593.833077][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.868503][ T9258] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 593.924678][ T9258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 594.078963][ T9449] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 594.723883][ T9449] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 594.892306][ T9747] loop5: detected capacity change from 0 to 131072 [ 594.924936][ T9747] F2FS-fs (loop5): invalid crc value [ 595.115815][ T9747] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 595.191983][ T9747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 595.265354][ T8579] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.488494][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.563479][ T9449] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 595.746791][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 595.836068][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 595.930999][ T8579] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.002371][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.089499][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.090400][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.124151][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.124402][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.269906][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.612652][ T8579] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.828640][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.021690][ T8579] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.105463][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.105620][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.157444][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.157570][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.424587][ T9764] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 597.436456][ T9764] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 597.814689][ T9764] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 597.895653][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 598.112077][ T9764] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 598.112212][ T9764] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 598.147963][ T1948] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 598.250594][ T9764] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 598.254138][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 598.394417][ T9764] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 598.394582][ T9764] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 598.465107][ T57] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 598.500345][ T9764] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 598.543657][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.577386][ T9764] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 598.577510][ T9764] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 598.646411][ T8579] bridge_slave_1: left allmulticast mode [ 598.646449][ T8579] bridge_slave_1: left promiscuous mode [ 598.646808][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.665590][ T9764] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 598.730860][ T9764] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.730946][ T9764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 598.787019][ T8579] bridge_slave_0: left allmulticast mode [ 598.787045][ T8579] bridge_slave_0: left promiscuous mode [ 598.787238][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.812106][ T9764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 598.816472][ T4908] Bluetooth: hci7: command 0x0c1a tx timeout [ 599.747019][ T8579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.827507][ T8579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.869661][ T8579] bond0 (unregistering): Released all slaves [ 599.983013][ T9501] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 600.176163][ T4908] Bluetooth: hci1: command 0x0c1a tx timeout [ 600.417683][ T4908] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.576122][ T4908] Bluetooth: hci2: command 0x0c1a tx timeout [ 600.638301][ T8579] hsr_slave_0: left promiscuous mode [ 600.676068][ T8579] hsr_slave_1: left promiscuous mode [ 600.682868][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.682899][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.727302][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.727323][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.736838][ T4908] Bluetooth: hci3: command 0x0c1a tx timeout [ 600.829487][ T8579] veth1_macvtap: left promiscuous mode [ 600.829610][ T8579] veth0_macvtap: left promiscuous mode [ 600.829949][ T8579] veth1_vlan: left promiscuous mode [ 600.830178][ T8579] veth0_vlan: left promiscuous mode [ 600.902362][ T4908] Bluetooth: hci7: command 0x0c1a tx timeout [ 601.668928][ T8579] team0 (unregistering): Port device team_slave_1 removed [ 601.717089][ T8579] team0 (unregistering): Port device team_slave_0 removed [ 601.927370][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 601.983603][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.185283][ T9501] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 602.257133][ T4908] Bluetooth: hci1: command 0x0c1a tx timeout [ 602.496048][ T4908] Bluetooth: hci0: command 0x0c1a tx timeout [ 602.538489][ T9207] veth0_vlan: entered promiscuous mode [ 602.659823][ T4908] Bluetooth: hci2: command 0x0c1a tx timeout [ 602.809722][ T9501] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 602.817994][ T4908] Bluetooth: hci3: command 0x0c1a tx timeout [ 602.960860][ T9207] veth1_vlan: entered promiscuous mode [ 603.003776][ T4908] Bluetooth: hci7: command 0x0c1a tx timeout [ 603.574599][ T9818] loop5: detected capacity change from 0 to 40427 [ 603.624487][ T9818] F2FS-fs (loop5): invalid crc value [ 603.983624][ T9501] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 604.113240][ T9818] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 604.141075][ T9818] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 604.293819][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 604.338205][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 604.343924][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 604.366429][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 604.367690][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 604.841542][ T9847] lo: entered allmulticast mode [ 604.917386][ T9847] tunl0: entered allmulticast mode [ 604.955024][ T9847] gre0: entered allmulticast mode [ 606.103996][ T4908] Bluetooth: hci0: command 0x0c1a tx timeout [ 606.104037][ T4908] Bluetooth: hci2: command 0x0c1a tx timeout [ 606.911562][ T5606] Bluetooth: hci3: command 0x0c1a tx timeout [ 606.913808][ T5606] Bluetooth: hci4: command tx timeout [ 607.003327][ T9847] gretap0: entered allmulticast mode [ 607.046814][ T9847] erspan0: entered allmulticast mode [ 607.049997][ T9847] ip_vti0: entered allmulticast mode [ 607.051767][ T9847] ip6_vti0: entered allmulticast mode [ 607.053996][ T9847] sit0: entered allmulticast mode [ 607.057517][ T9847] ip6tnl0: entered allmulticast mode [ 607.059728][ T9847] ip6gre0: entered allmulticast mode [ 607.086614][ T9847] syz_tun: entered allmulticast mode [ 607.129242][ T9847] ip6gretap0: entered allmulticast mode [ 607.132987][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.133526][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.134632][ T9847] bridge0: entered allmulticast mode [ 607.137969][ T9847] vcan0: entered allmulticast mode [ 607.166423][ T9847] bond0: entered allmulticast mode [ 607.166445][ T9847] bond_slave_0: entered allmulticast mode [ 607.166468][ T9847] bond_slave_1: entered allmulticast mode [ 607.173847][ T9847] team0: entered allmulticast mode [ 607.173865][ T9847] team_slave_0: entered allmulticast mode [ 607.173887][ T9847] team_slave_1: entered allmulticast mode [ 607.179367][ T9847] dummy0: entered allmulticast mode [ 607.218053][ T9847] nlmon0: entered allmulticast mode [ 607.220134][ T9847] batadv0: entered allmulticast mode [ 607.223821][ T9847] vxcan0: entered allmulticast mode [ 607.225045][ T9847] vxcan1: entered allmulticast mode [ 607.226647][ T9847] veth0: entered allmulticast mode [ 607.229397][ T9847] veth1: entered allmulticast mode [ 607.266871][ T9847] wg0: entered allmulticast mode [ 607.306278][ T9847] wg1: entered allmulticast mode [ 607.346421][ T9847] wg2: entered allmulticast mode [ 607.349861][ T9847] veth0_to_bridge: entered allmulticast mode [ 607.355116][ T9847] veth1_to_bridge: entered allmulticast mode [ 607.360203][ T9847] veth0_to_bond: entered allmulticast mode [ 607.363959][ T9847] veth1_to_bond: entered allmulticast mode [ 607.367507][ T9847] veth0_to_team: entered allmulticast mode [ 607.409410][ T9847] veth1_to_team: entered allmulticast mode [ 607.414500][ T9847] veth0_to_batadv: entered allmulticast mode [ 607.418744][ T9847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.418837][ T9847] batadv_slave_0: entered allmulticast mode [ 607.424631][ T9847] veth1_to_batadv: entered allmulticast mode [ 607.429540][ T9847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.429623][ T9847] batadv_slave_1: entered allmulticast mode [ 607.434436][ T9847] xfrm0: entered allmulticast mode [ 607.438543][ T9847] veth0_to_hsr: entered allmulticast mode [ 607.442838][ T9847] hsr_slave_0: entered allmulticast mode [ 607.445676][ T9847] veth1_to_hsr: entered allmulticast mode [ 607.449778][ T9847] hsr_slave_1: entered allmulticast mode [ 607.457258][ T9847] hsr0: entered allmulticast mode [ 607.461643][ T9847] veth1_virt_wifi: entered allmulticast mode [ 607.466362][ T9847] veth0_virt_wifi: entered allmulticast mode [ 607.470781][ T9847] virt_wifi0: entered allmulticast mode [ 607.471351][ T9847] veth1_vlan: entered allmulticast mode [ 607.476322][ T9847] veth0_vlan: entered allmulticast mode [ 607.482898][ T9847] vlan0: entered allmulticast mode [ 607.488190][ T9847] vlan1: entered allmulticast mode [ 607.516142][ T9847] macvlan0: entered allmulticast mode [ 607.566133][ T9847] macvlan1: entered allmulticast mode [ 607.569749][ T9847] ipvlan0: entered allmulticast mode [ 607.569895][ T9847] ipvlan1: entered allmulticast mode [ 607.570338][ T9847] veth1_macvtap: entered allmulticast mode [ 607.573951][ T9847] veth0_macvtap: entered allmulticast mode [ 607.646126][ T9847] macvtap0: entered allmulticast mode [ 607.651702][ T9847] macsec0: entered allmulticast mode [ 607.656708][ T9847] geneve0: entered allmulticast mode [ 607.668328][ T9847] geneve1: entered allmulticast mode [ 607.736575][ T9847] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 607.816323][ T9847] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 607.876199][ T9847] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 607.956204][ T9847] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 608.119587][ T9847] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 608.284641][ T9847] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 608.410278][ T8862] syz-executor: attempt to access beyond end of device [ 608.410278][ T8862] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 608.434494][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 608.434525][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 608.434546][ T8862] Call Trace: [ 608.434554][ T8862] [ 608.434563][ T8862] dump_stack_lvl+0xe8/0x150 [ 608.434598][ T8862] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 608.434631][ T8862] f2fs_write_end_io+0x124b/0x1710 [ 608.434678][ T8862] __submit_merged_bio+0x258/0x6a0 [ 608.434703][ T8862] ? rcu_is_watching+0x15/0xb0 [ 608.434735][ T8862] __submit_merged_write_cond+0x3c9/0x4e0 [ 608.434769][ T8862] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 608.434817][ T8862] f2fs_write_data_pages+0x2a27/0x36f0 [ 608.434885][ T8862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 608.434958][ T8862] ? do_raw_spin_lock+0x12b/0x2f0 [ 608.434992][ T8862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 608.435017][ T8862] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 608.435040][ T8862] ? reacquire_held_locks+0x117/0x1a0 [ 608.435063][ T8862] ? rt_spin_lock+0x1e0/0x400 [ 608.435092][ T8862] ? rt_spin_unlock+0x157/0x200 [ 608.435116][ T8862] ? rt_spin_unlock+0x163/0x200 [ 608.435135][ T8862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 608.435161][ T8862] do_writepages+0x338/0x560 [ 608.435190][ T8862] ? rt_spin_unlock+0x157/0x200 [ 608.435221][ T8862] filemap_fdatawrite+0x1ec/0x2f0 [ 608.435250][ T8862] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 608.435271][ T8862] ? do_raw_spin_lock+0x12b/0x2f0 [ 608.435326][ T8862] ? rt_spin_unlock+0x157/0x200 [ 608.435352][ T8862] ? rt_spin_unlock+0x163/0x200 [ 608.435376][ T8862] f2fs_sync_dirty_inodes+0x30e/0x830 [ 608.435420][ T8862] f2fs_write_checkpoint+0x999/0x26b0 [ 608.435475][ T8862] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 608.435579][ T8862] kill_f2fs_super+0x2dd/0x700 [ 608.435615][ T8862] ? __pfx_kill_f2fs_super+0x10/0x10 [ 608.435652][ T8862] ? call_rcu+0x64b/0x8b0 [ 608.435679][ T8862] ? lockdep_hardirqs_on+0x7a/0x110 [ 608.435721][ T8862] deactivate_locked_super+0xbc/0x110 [ 608.435747][ T8862] cleanup_mnt+0x3d3/0x460 [ 608.435776][ T8862] task_work_run+0x1d9/0x270 [ 608.435797][ T8862] ? __pfx_task_work_run+0x10/0x10 [ 608.435826][ T8862] exit_to_user_mode_loop+0x1fa/0x730 [ 608.435846][ T8862] ? rcu_is_watching+0x15/0xb0 [ 608.435872][ T8862] do_syscall_64+0x33d/0x530 [ 608.435898][ T8862] ? irqentry_exit+0x10f/0x8f0 [ 608.435922][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.435940][ T8862] ? clear_bhb_loop+0x40/0x90 [ 608.435962][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.435980][ T8862] RIP: 0033:0x7f8540faf0d7 [ 608.435999][ T8862] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 608.436016][ T8862] RSP: 002b:00007ffdb347cd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 608.436038][ T8862] RAX: 0000000000000000 RBX: 00007f854104330a RCX: 00007f8540faf0d7 [ 608.436052][ T8862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb347cdf0 [ 608.436063][ T8862] RBP: 00007ffdb347cdf0 R08: 00007ffdb347ddf0 R09: 00000000ffffffff [ 608.436075][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb347de80 [ 608.436086][ T8862] R13: 00007f854104330a R14: 0000000000093dce R15: 00007ffdb347dec0 [ 608.436115][ T8862] [ 608.465272][ T8862] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 608.788794][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 608.896491][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 608.954845][ T2955] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.975347][ T2955] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.976138][ T5606] Bluetooth: hci4: command tx timeout [ 608.991187][ T2955] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.006988][ T2955] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.360032][ T9258] veth0_vlan: entered promiscuous mode [ 609.549013][ T9258] veth1_vlan: entered promiscuous mode [ 609.576903][ T37] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 609.738017][ T37] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 105, changing to 4 [ 609.740323][ T37] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 609.740352][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.740372][ T37] usb 6-1: Product: syz [ 609.740385][ T37] usb 6-1: Manufacturer: syz [ 609.740394][ T37] usb 6-1: SerialNumber: syz [ 611.058601][ T5606] Bluetooth: hci4: command tx timeout [ 612.559853][ T9850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 612.614024][ T9850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 612.622545][ T9850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 612.673106][ T9850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 612.674177][ T9850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 612.750501][ T37] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 612.754268][ T37] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 612.884211][ T9871] loop5: detected capacity change from 0 to 128 [ 612.996730][ T37] usb 6-1: USB disconnect, device number 2 [ 613.001784][ T9092] Flush: task=udevd[9092] dev=loop5 state=2 [ 613.144076][ T9850] Bluetooth: hci4: command tx timeout [ 613.156503][ T9042] udevd[9042]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.203475][ T9092] Teardown: task=udevd[9092] dev=loop5 state=2 [ 613.570950][ T9449] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 613.606671][ T9449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.658460][ T9449] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 613.805140][ T9449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.111503][ T9449] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 614.162025][ T9449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 614.376819][ T9449] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 614.434871][ T9449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.816982][ T9850] Bluetooth: hci1: command tx timeout [ 615.316342][ T9501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.362704][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.583612][ T9501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.653318][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.653625][ T8577] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 615.745709][ T9501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.782416][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.858937][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'. [ 616.030630][ T9501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 616.414979][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.217874][ T9850] Bluetooth: hci1: command tx timeout [ 617.279480][ T9931] wireguard0: entered promiscuous mode [ 617.430112][ T8577] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 617.770844][ T8577] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 618.022951][ T1957] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 618.186269][ T1948] bridge_slave_1: left allmulticast mode [ 618.186309][ T1948] bridge_slave_1: left promiscuous mode [ 618.186675][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.348652][ T1948] bridge_slave_0: left allmulticast mode [ 618.348679][ T1948] bridge_slave_0: left promiscuous mode [ 618.398035][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.296321][ T9850] Bluetooth: hci1: command tx timeout [ 619.762879][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.837021][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.880906][ T1948] bond0 (unregistering): Released all slaves [ 620.168725][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.169304][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.169618][ T9842] bridge_slave_0: entered allmulticast mode [ 620.174629][ T9842] bridge_slave_0: entered promiscuous mode [ 620.255558][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.261209][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.263377][ T9842] bridge_slave_1: entered allmulticast mode [ 620.271849][ T9842] bridge_slave_1: entered promiscuous mode [ 620.508995][ T9842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.696138][ T1948] hsr_slave_0: left promiscuous mode [ 620.738934][ T1948] hsr_slave_1: left promiscuous mode [ 620.740799][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.771533][ T9980] loop5: detected capacity change from 0 to 2048 [ 620.782646][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.814366][ T9980] loop5: p1 < > p3 [ 620.833618][ T9980] loop5: p3 size 134217728 extends beyond EOD, truncated [ 620.909401][ T1948] veth1_vlan: left promiscuous mode [ 620.909649][ T1948] veth0_vlan: left promiscuous mode [ 621.060030][ T9042] Flush: task=udevd[9042] dev=loop5 state=2 [ 621.147522][ T9042] Teardown: task=udevd[9042] dev=loop5 state=2 [ 621.264892][ T9042] udevd[9042]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 621.271267][ T9879] udevd[9879]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 621.299059][ T9879] udevd[9879]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 621.299330][ T9042] udevd[9042]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 621.376964][ T9850] Bluetooth: hci1: command tx timeout [ 621.618145][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 621.666961][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 621.862728][ T9842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.109025][ T9842] team0: Port device team_slave_0 added [ 622.127135][ T9842] team0: Port device team_slave_1 added [ 622.315464][ T9987] loop5: detected capacity change from 0 to 4096 [ 622.469658][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.469679][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.469707][ T9842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.541232][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.541250][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.541275][ T9842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.623088][ T9987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.386575][ T9842] hsr_slave_0: entered promiscuous mode [ 623.388789][ T9842] hsr_slave_1: entered promiscuous mode [ 623.390519][ T9842] debugfs: 'hsr0' already exists in 'hsr' [ 623.390545][ T9842] Cannot create hsr debugfs directory [ 623.440897][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.441252][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.441564][ T9865] bridge_slave_0: entered allmulticast mode [ 623.445443][ T9865] bridge_slave_0: entered promiscuous mode [ 623.467349][ T9865] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.467716][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.468006][ T9865] bridge_slave_1: entered allmulticast mode [ 623.480643][ T9865] bridge_slave_1: entered promiscuous mode [ 623.717425][ T9865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.719841][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 623.740931][ T9449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.774555][ T9865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.880889][ T9865] team0: Port device team_slave_0 added [ 623.924925][ T9865] team0: Port device team_slave_1 added [ 624.038693][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.080690][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 624.166294][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 624.304047][T10011] loop5: detected capacity change from 0 to 4096 [ 624.313791][ T9865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.313803][ T9865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.313820][ T9865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.384681][T10011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.410110][ T9449] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.412543][ T9865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.412554][ T9865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.415582][ T9865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.505871][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.643234][ T9879] Flush: task=udevd[9879] dev=loop5 state=2 [ 624.736098][ T9879] Teardown: task=udevd[9879] dev=loop5 state=2 [ 624.757555][T10017] loop5: detected capacity change from 0 to 256 [ 624.762800][T10017] exfat: Deprecated parameter 'utf8' [ 624.762956][T10017] exfat: Deprecated parameter 'namecase' [ 624.838498][T10017] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 624.881378][ T38] audit: type=1800 audit(1784308339.048:30): pid=10017 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.658" name="file1" dev="loop5" ino=1048661 res=0 errno=0 [ 624.988959][ T9501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.178480][ T9879] Flush: task=udevd[9879] dev=loop5 state=2 [ 625.264478][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.298004][ T9879] Teardown: task=udevd[9879] dev=loop5 state=2 [ 625.315169][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.319850][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 625.353510][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 625.386126][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.104552][ T9865] hsr_slave_0: entered promiscuous mode [ 626.114278][ T9865] hsr_slave_1: entered promiscuous mode [ 626.122811][ T9865] debugfs: 'hsr0' already exists in 'hsr' [ 626.122841][ T9865] Cannot create hsr debugfs directory [ 626.227122][ T9501] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.518804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.518992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.678153][ T9842] netdevsim netdevsim7 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 627.540637][ T9850] Bluetooth: hci0: command tx timeout [ 627.914766][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 627.945318][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.945485][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.208856][ T9842] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 628.695269][ T9842] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 629.063142][ T9842] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 629.238323][ T2955] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 629.320585][ T158] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 629.394240][ T8576] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 629.487845][ T158] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 629.637472][ T9850] Bluetooth: hci0: command tx timeout [ 629.700530][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.700602][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.766273][ T1948] bridge_slave_1: left allmulticast mode [ 629.766313][ T1948] bridge_slave_1: left promiscuous mode [ 629.766655][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.927172][ T1948] bridge_slave_0: left allmulticast mode [ 629.927197][ T1948] bridge_slave_0: left promiscuous mode [ 629.927408][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.976305][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 630.140114][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 630.141948][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.141981][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.142002][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 630.142028][ T5876] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 630.142043][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.145142][ T5876] usb 6-1: config 0 descriptor?? [ 630.662753][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662792][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662827][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662853][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662878][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662903][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662928][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662952][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.662976][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.663000][ T5876] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 630.680152][ T5876] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 630.860556][ T5876] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71 [ 630.861150][ T5876] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71 [ 630.862046][ T5876] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 630.865382][ T5876] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 630.919684][ T5876] usb 6-1: USB disconnect, device number 3 [ 631.133159][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 631.169954][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 631.171254][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 631.175261][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 631.188935][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.337887][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.398694][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.438222][ T1948] bond0 (unregistering): Released all slaves [ 631.738426][ T9850] Bluetooth: hci0: command tx timeout [ 632.412335][ T9865] netdevsim netdevsim8 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 633.326118][ T1948] hsr_slave_0: left promiscuous mode [ 633.366259][ T1948] hsr_slave_1: left promiscuous mode [ 633.367487][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.381563][ T9850] Bluetooth: hci2: command tx timeout [ 633.417304][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.518292][ T1948] veth1_vlan: left promiscuous mode [ 633.518437][ T1948] veth0_vlan: left promiscuous mode [ 633.672525][T10116] loop9: detected capacity change from 0 to 8 [ 633.745205][T10116] Dev loop9: unable to read RDB block 8 [ 633.745250][T10116] loop9: unable to read partition table [ 633.745500][T10116] loop9: partition table beyond EOD, truncated [ 633.745532][T10116] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 633.780351][ T9850] Bluetooth: hci0: command tx timeout [ 633.809208][ T9879] Flush: task=udevd[9879] dev=loop9 state=2 [ 633.952833][ T9879] Teardown: task=udevd[9879] dev=loop9 state=2 [ 635.144101][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 635.219035][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 635.462002][ T9850] Bluetooth: hci2: command tx timeout [ 635.777035][T10160] loop5: detected capacity change from 0 to 1024 [ 635.783106][T10160] EXT4-fs: Ignoring removed orlov option [ 635.862792][T10160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.114017][ T9865] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 636.312470][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.372200][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.372488][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.372751][T10021] bridge_slave_0: entered allmulticast mode [ 636.380267][T10021] bridge_slave_0: entered promiscuous mode [ 636.394312][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.394649][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.394905][T10021] bridge_slave_1: entered allmulticast mode [ 636.400345][T10021] bridge_slave_1: entered promiscuous mode [ 636.443537][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 636.553079][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 636.570012][ T9865] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 636.671717][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.741584][T10021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.135628][ T9865] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 637.231047][T10021] team0: Port device team_slave_0 added [ 637.274710][T10021] team0: Port device team_slave_1 added [ 637.570839][ T9850] Bluetooth: hci2: command tx timeout [ 637.641328][T10021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.641348][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.641378][T10021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.727537][T10021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.727555][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.727585][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.804976][T10190] loop5: detected capacity change from 0 to 512 [ 637.820386][T10190] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 637.872064][T10190] EXT4-fs (loop5): 1 truncate cleaned up [ 637.875222][T10190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.095506][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.171224][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 638.204258][T10021] hsr_slave_0: entered promiscuous mode [ 638.214798][T10021] hsr_slave_1: entered promiscuous mode [ 638.222734][T10021] debugfs: 'hsr0' already exists in 'hsr' [ 638.222760][T10021] Cannot create hsr debugfs directory [ 638.256592][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 639.617203][ T9850] Bluetooth: hci2: command tx timeout [ 640.476317][ T9842] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 640.563306][ T9842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.054172][T10220] loop5: detected capacity change from 0 to 256 [ 641.134949][T10220] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 641.173740][T10220] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 641.429060][ T9842] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 641.452537][ T9842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.505767][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 641.517450][ T9842] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 641.552369][ T9842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.577951][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 641.687896][ T9842] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 641.824304][ T9842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.852188][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.852382][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.852577][T10069] bridge_slave_0: entered allmulticast mode [ 641.855216][T10069] bridge_slave_0: entered promiscuous mode [ 642.380362][T10230] loop5: detected capacity change from 0 to 1024 [ 642.458635][T10230] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 642.853648][T10230] Flush: task=syz.5.679[10230] dev=loop5 state=2 [ 642.857938][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.858255][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.858559][T10069] bridge_slave_1: entered allmulticast mode [ 642.864998][T10069] bridge_slave_1: entered promiscuous mode [ 644.869666][T10069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.924510][T10069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.509445][T10230] Teardown: task=syz.5.679[10230] dev=loop5 state=2 [ 645.764893][T10069] team0: Port device team_slave_0 added [ 645.865639][T10069] team0: Port device team_slave_1 added [ 646.011672][ T9865] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 646.144410][T10238] loop5: detected capacity change from 0 to 16 [ 646.411548][T10238] erofs (device loop5): mounted with root inode @ nid 36. [ 646.505756][T10238] IPv6: NLM_F_CREATE should be specified when creating new route [ 647.553274][ T9865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.645522][ T1957] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 648.369372][ T9865] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 648.410050][ T9865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.619658][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 648.696314][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 648.839456][ T9865] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 648.881838][ T9865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.948298][T10069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.948310][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.948326][T10069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.952793][ T2955] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 648.966599][ T9865] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 649.018488][ T9865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.031332][T10069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.031347][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.031373][T10069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.386460][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 649.520251][ T2955] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 649.567410][T10069] hsr_slave_0: entered promiscuous mode [ 649.568851][T10069] hsr_slave_1: entered promiscuous mode [ 649.572930][T10069] debugfs: 'hsr0' already exists in 'hsr' [ 649.572958][T10069] Cannot create hsr debugfs directory [ 650.712975][T10255] loop5: detected capacity change from 0 to 512 [ 650.947132][T10255] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 651.470042][T10255] EXT4-fs (loop5): 1 truncate cleaned up [ 651.512292][T10255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.665289][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.731745][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 653.821834][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 654.091757][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.201280][ T9842] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.249841][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.250130][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.281082][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.281317][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.300656][ T9865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.661724][ T9865] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.841581][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.841738][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.026190][ T1948] bridge_slave_1: left allmulticast mode [ 655.026231][ T1948] bridge_slave_1: left promiscuous mode [ 655.026556][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.169258][ T1948] bridge_slave_0: left allmulticast mode [ 655.169285][ T1948] bridge_slave_0: left promiscuous mode [ 655.169491][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.324150][T10283] loop5: detected capacity change from 0 to 40427 [ 655.340683][T10283] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 655.340714][T10283] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 655.341729][T10283] F2FS-fs (loop5): build fault injection rate: 771 [ 655.344412][T10283] F2FS-fs (loop5): invalid crc value [ 655.396338][ T1948] bridge_slave_1: left allmulticast mode [ 655.396379][ T1948] bridge_slave_1: left promiscuous mode [ 655.396676][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.491640][T10283] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 655.507788][T10283] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 655.507819][T10283] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 655.557152][ T1948] bridge_slave_0: left allmulticast mode [ 655.557179][ T1948] bridge_slave_0: left promiscuous mode [ 655.557360][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.582362][ T8862] syz-executor: attempt to access beyond end of device [ 655.582362][ T8862] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 655.591305][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 655.591332][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 655.591344][ T8862] Call Trace: [ 655.591351][ T8862] [ 655.591360][ T8862] dump_stack_lvl+0xe8/0x150 [ 655.591395][ T8862] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 655.591433][ T8862] f2fs_write_end_io+0x124b/0x1710 [ 655.591482][ T8862] __submit_merged_bio+0x258/0x6a0 [ 655.591505][ T8862] ? rcu_is_watching+0x15/0xb0 [ 655.591536][ T8862] __submit_merged_write_cond+0x3c9/0x4e0 [ 655.591569][ T8862] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 655.591618][ T8862] f2fs_write_data_pages+0x2a27/0x36f0 [ 655.591683][ T8862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 655.591759][ T8862] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.591797][ T8862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 655.591825][ T8862] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 655.591850][ T8862] ? reacquire_held_locks+0x117/0x1a0 [ 655.591873][ T8862] ? rt_spin_lock+0x1e0/0x400 [ 655.591904][ T8862] ? rt_spin_unlock+0x157/0x200 [ 655.591931][ T8862] ? rt_spin_unlock+0x163/0x200 [ 655.591952][ T8862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 655.591981][ T8862] do_writepages+0x338/0x560 [ 655.592012][ T8862] ? rt_spin_unlock+0x157/0x200 [ 655.592045][ T8862] filemap_fdatawrite+0x1ec/0x2f0 [ 655.592075][ T8862] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 655.592099][ T8862] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.592158][ T8862] ? rt_spin_unlock+0x157/0x200 [ 655.592185][ T8862] ? rt_spin_unlock+0x163/0x200 [ 655.592211][ T8862] f2fs_sync_dirty_inodes+0x30e/0x830 [ 655.592255][ T8862] f2fs_write_checkpoint+0x999/0x26b0 [ 655.592318][ T8862] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 655.592391][ T8862] ? rt_spin_unlock+0x163/0x200 [ 655.592431][ T8862] kill_f2fs_super+0x2dd/0x700 [ 655.592469][ T8862] ? __pfx_kill_f2fs_super+0x10/0x10 [ 655.592510][ T8862] ? call_rcu+0x64b/0x8b0 [ 655.592535][ T8862] ? lockdep_hardirqs_on+0x7a/0x110 [ 655.592577][ T8862] deactivate_locked_super+0xbc/0x110 [ 655.592604][ T8862] cleanup_mnt+0x3d3/0x460 [ 655.592636][ T8862] task_work_run+0x1d9/0x270 [ 655.592660][ T8862] ? __pfx_task_work_run+0x10/0x10 [ 655.592692][ T8862] exit_to_user_mode_loop+0x1fa/0x730 [ 655.592713][ T8862] ? rcu_is_watching+0x15/0xb0 [ 655.592743][ T8862] do_syscall_64+0x33d/0x530 [ 655.592770][ T8862] ? irqentry_exit+0x10f/0x8f0 [ 655.592795][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.592815][ T8862] ? clear_bhb_loop+0x40/0x90 [ 655.592839][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.592858][ T8862] RIP: 0033:0x7f8540faf0d7 [ 655.592877][ T8862] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 655.592894][ T8862] RSP: 002b:00007ffdb347cd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 655.592915][ T8862] RAX: 0000000000000000 RBX: 00007f854104330a RCX: 00007f8540faf0d7 [ 655.592929][ T8862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb347cdf0 [ 655.592940][ T8862] RBP: 00007ffdb347cdf0 R08: 00007ffdb347ddf0 R09: 00000000ffffffff [ 655.592953][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb347de80 [ 655.592965][ T8862] R13: 00007f854104330a R14: 000000000009fedc R15: 00007ffdb347dec0 [ 655.592998][ T8862] [ 655.595012][ T8862] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 655.961210][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 656.046182][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 656.806693][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.868047][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.908341][ T1948] bond0 (unregistering): Released all slaves [ 657.587065][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.859143][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.980664][ T1948] bond0 (unregistering): Released all slaves [ 660.042276][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 660.248083][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.248218][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.314899][T10069] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 660.639920][T10069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 661.148993][ T1948] hsr_slave_0: left promiscuous mode [ 661.187465][ T1948] hsr_slave_1: left promiscuous mode [ 661.189000][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.226736][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.366095][ T1948] hsr_slave_0: left promiscuous mode [ 661.386191][ T1948] hsr_slave_1: left promiscuous mode [ 661.389672][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.426821][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.932390][T10308] loop5: detected capacity change from 0 to 256 [ 662.091507][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 662.107068][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 662.166843][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 662.207186][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 662.937447][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 662.998544][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 663.503079][T10069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 663.641060][T10310] loop5: detected capacity change from 0 to 131072 [ 663.688337][T10310] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 663.688370][T10310] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 663.690789][T10310] F2FS-fs (loop5): invalid crc value [ 664.210090][T10310] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 664.426111][T10310] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 664.426145][T10310] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 664.493235][T10310] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 664.694532][T10069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 665.410380][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 665.701998][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 665.729867][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.803934][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 665.813722][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 665.872019][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 665.899177][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 666.370752][ T9865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.323689][T10021] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 667.436482][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.451503][T10021] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 667.496931][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.534339][T10021] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 667.619367][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.634606][T10021] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 667.669275][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.939611][ T5606] Bluetooth: hci3: command tx timeout [ 668.143338][ T9865] veth0_vlan: entered promiscuous mode [ 668.170797][ T38] audit: type=1326 audit(1784308382.338:31): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540fade99 code=0x7ffc0000 [ 668.170941][ T38] audit: type=1326 audit(1784308382.338:32): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540fade99 code=0x7ffc0000 [ 668.229147][ T38] audit: type=1326 audit(1784308382.338:33): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8540fade99 code=0x7ffc0000 [ 668.229811][ T38] audit: type=1326 audit(1784308382.398:34): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8540fadc02 code=0x7ffc0000 [ 668.234237][ T38] audit: type=1326 audit(1784308382.398:35): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8540f6e6ce code=0x7ffc0000 [ 668.313306][ T38] audit: type=1326 audit(1784308382.478:36): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8540fadcc7 code=0x7ffc0000 [ 668.314522][ T38] audit: type=1326 audit(1784308382.478:37): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8540f6e6ce code=0x7ffc0000 [ 668.315078][ T38] audit: type=1326 audit(1784308382.478:38): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8540fadb2b code=0x7ffc0000 [ 668.315780][T10368] loop5: detected capacity change from 0 to 512 [ 668.398103][ T38] audit: type=1326 audit(1784308382.568:39): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8540f6e6ce code=0x7ffc0000 [ 668.398407][ T38] audit: type=1326 audit(1784308382.568:40): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10367 comm="syz.5.694" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8540f6e6ce code=0x7ffc0000 [ 668.477486][T10368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 668.477615][T10368] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.659696][ T9865] veth1_vlan: entered promiscuous mode [ 669.813115][T10069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 670.906032][ T5606] Bluetooth: hci3: command tx timeout [ 671.635525][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.665503][T10069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.793499][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 671.852474][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.853544][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 671.956145][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 672.275553][T10069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 672.299797][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.317171][T10069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 672.385564][T10069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.856665][ T9850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.865163][ T9850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.871246][ T9850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.894101][ T9850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.895045][ T9850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.980157][ T9850] Bluetooth: hci3: command tx timeout [ 673.549805][T10021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.706307][T10413] loop5: detected capacity change from 0 to 4096 [ 675.104401][T10413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.155207][ T5606] Bluetooth: hci3: command tx timeout [ 676.024632][ T5606] Bluetooth: hci1: command tx timeout [ 677.921081][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.763414][ T5606] Bluetooth: hci1: command tx timeout [ 679.064638][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.088318][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.088482][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.101095][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.101396][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.101653][T10332] bridge_slave_0: entered allmulticast mode [ 679.105056][T10332] bridge_slave_0: entered promiscuous mode [ 679.213455][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.213656][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.213849][T10332] bridge_slave_1: entered allmulticast mode [ 679.218155][T10332] bridge_slave_1: entered promiscuous mode [ 679.254502][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 679.303222][ T1957] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.303371][ T1957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.346071][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 679.408839][T10332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.439024][T10332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.818667][ T5606] Bluetooth: hci1: command tx timeout [ 680.870692][T10332] team0: Port device team_slave_0 added [ 680.885832][ T48] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 680.979929][T10332] team0: Port device team_slave_1 added [ 681.294675][ T8576] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 681.454188][T10332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.454201][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.454218][T10332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.502861][ T1374] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 681.526313][T10332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.526326][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.526342][T10332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.641119][ T8579] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 681.796111][ T1948] bridge_slave_1: left allmulticast mode [ 681.796138][ T1948] bridge_slave_1: left promiscuous mode [ 681.800402][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.898061][ T1948] bridge_slave_0: left allmulticast mode [ 681.898110][ T1948] bridge_slave_0: left promiscuous mode [ 681.898565][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.241008][T10441] loop5: detected capacity change from 0 to 512 [ 682.899940][ T5606] Bluetooth: hci1: command tx timeout [ 683.084716][T10441] EXT4-fs (loop5): Test dummy encryption mode enabled [ 683.303917][T10441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.593021][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.664534][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 683.823890][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 683.978860][T10448] loop5: detected capacity change from 0 to 512 [ 684.167946][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.258892][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.281647][ T1948] bond0 (unregistering): Released all slaves [ 684.453614][T10449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.532628][T10332] hsr_slave_0: entered promiscuous mode [ 684.535606][T10332] hsr_slave_1: entered promiscuous mode [ 684.560230][T10332] debugfs: 'hsr0' already exists in 'hsr' [ 684.560260][T10332] Cannot create hsr debugfs directory [ 684.750701][T10069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.944204][ T8576] kworker/u8:16: attempt to access beyond end of device [ 684.944204][ T8576] loop5: rw=1, sector=6040, nr_sectors = 2048 limit=512 [ 684.952809][ T8576] kworker/u8:16: attempt to access beyond end of device [ 684.952809][ T8576] loop5: rw=1, sector=8088, nr_sectors = 2136 limit=512 [ 684.958384][ T8576] kworker/u8:16: attempt to access beyond end of device [ 684.958384][ T8576] loop5: rw=1, sector=10224, nr_sectors = 2048 limit=512 [ 684.963003][ T8576] kworker/u8:16: attempt to access beyond end of device [ 684.963003][ T8576] loop5: rw=1, sector=12272, nr_sectors = 2048 limit=512 [ 684.969084][ T8576] kworker/u8:16: attempt to access beyond end of device [ 684.969084][ T8576] loop5: rw=1, sector=14320, nr_sectors = 2048 limit=512 [ 684.970917][ T8576] kworker/u8:16: attempt to access beyond end of device [ 684.970917][ T8576] loop5: rw=1, sector=16368, nr_sectors = 96 limit=512 [ 685.156023][ T1948] hsr_slave_0: left promiscuous mode [ 685.196094][ T1948] hsr_slave_1: left promiscuous mode [ 685.198121][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.200467][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 685.237713][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.306171][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 685.353239][T10458] loop5: detected capacity change from 0 to 512 [ 685.413060][T10458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 685.413192][T10458] ext4 filesystem being mounted at /117/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.608634][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 685.734014][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 685.785387][ T9850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 685.834010][ T9850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 685.837803][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 685.857656][ T9850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 685.873403][ T9850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 685.891249][ T9850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 686.266874][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 686.328079][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 686.961608][T10473] loop5: detected capacity change from 0 to 40427 [ 686.994597][T10473] F2FS-fs (loop5): invalid crc value [ 687.307081][T10069] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.467704][T10473] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 687.540383][T10473] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 688.028994][ T9850] Bluetooth: hci4: command tx timeout [ 688.119966][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 688.226757][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 688.341516][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.341855][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.360881][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.361260][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.361569][T10393] bridge_slave_0: entered allmulticast mode [ 688.390834][T10393] bridge_slave_0: entered promiscuous mode [ 688.439371][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.439726][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.440057][T10393] bridge_slave_1: entered allmulticast mode [ 688.482351][T10393] bridge_slave_1: entered promiscuous mode [ 688.622978][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.623173][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.751182][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 688.969430][T10332] netdevsim netdevsim7 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 689.369861][T10501] loop5: detected capacity change from 0 to 1024 [ 689.432352][T10501] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 690.804887][ T9879] Flush: task=udevd[9879] dev=loop5 state=2 [ 690.942300][ T9850] Bluetooth: hci4: command tx timeout [ 691.593007][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.593126][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.669625][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.681569][ T9879] Teardown: task=udevd[9879] dev=loop5 state=2 [ 691.702727][T10503] loop5: detected capacity change from 0 to 512 [ 691.715302][T10503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 691.800374][T10503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.800516][T10503] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.815128][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.882517][ T38] kauditd_printk_skb: 29 callbacks suppressed [ 691.882536][ T38] audit: type=1800 audit(1784308406.048:70): pid=10503 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.714" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 692.119301][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.156065][T10332] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 692.283610][ T9879] Flush: task=udevd[9879] dev=loop5 state=2 [ 692.380933][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.427651][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.429545][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.433381][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.435392][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.535086][ T9879] Teardown: task=udevd[9879] dev=loop5 state=2 [ 692.976746][ T9850] Bluetooth: hci4: command tx timeout [ 693.793612][T10393] team0: Port device team_slave_0 added [ 693.880247][T10332] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 693.957932][T10393] team0: Port device team_slave_1 added [ 694.435609][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.435629][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.435658][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.661364][ T9850] Bluetooth: hci0: command tx timeout [ 694.700186][T10332] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 694.791563][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.791581][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.791610][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.070556][ T9850] Bluetooth: hci4: command tx timeout [ 695.275391][T10528] loop5: detected capacity change from 0 to 16 [ 695.424284][T10528] erofs (device loop5): mounted with root inode @ nid 36. [ 696.799944][ T9850] Bluetooth: hci0: command tx timeout [ 697.704711][T10393] hsr_slave_0: entered promiscuous mode [ 697.707251][T10393] hsr_slave_1: entered promiscuous mode [ 697.709319][T10393] debugfs: 'hsr0' already exists in 'hsr' [ 697.709346][T10393] Cannot create hsr debugfs directory [ 698.046214][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 698.116717][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 698.816287][ T9850] Bluetooth: hci0: command tx timeout [ 699.211010][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.211373][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.211669][T10464] bridge_slave_0: entered allmulticast mode [ 699.221329][T10464] bridge_slave_0: entered promiscuous mode [ 699.322619][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.323005][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.323329][T10464] bridge_slave_1: entered allmulticast mode [ 699.328539][T10464] bridge_slave_1: entered promiscuous mode [ 699.624826][ T8577] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 699.638145][T10332] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 700.010502][T10551] loop5: detected capacity change from 0 to 512 [ 700.484322][T10551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.485269][T10551] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.604277][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.720'. [ 701.400688][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 701.940037][ T9850] Bluetooth: hci0: command tx timeout [ 702.143865][T10332] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 702.421727][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.422861][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.516943][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 702.574778][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.626679][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 702.941319][T10332] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 702.987646][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.988861][ T8578] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 703.029038][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.078734][T10332] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 703.103895][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.222195][ T8577] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 703.431840][T10563] loop5: detected capacity change from 0 to 40427 [ 703.448977][T10563] F2FS-fs (loop5): build fault injection rate: 174 [ 703.449004][T10563] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 703.450404][T10563] F2FS-fs (loop5): invalid crc value [ 703.650325][T10563] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 703.700274][T10563] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 703.792335][ T8862] syz-executor: attempt to access beyond end of device [ 703.792335][ T8862] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 703.818162][T10464] team0: Port device team_slave_0 added [ 703.849208][ T8578] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 703.858212][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 703.858241][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 703.858252][ T8862] Call Trace: [ 703.858260][ T8862] [ 703.858267][ T8862] dump_stack_lvl+0xe8/0x150 [ 703.858300][ T8862] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 703.858334][ T8862] f2fs_write_end_io+0x124b/0x1710 [ 703.858388][ T8862] __submit_merged_bio+0x258/0x6a0 [ 703.858418][ T8862] ? rcu_is_watching+0x15/0xb0 [ 703.858454][ T8862] __submit_merged_write_cond+0x3c9/0x4e0 [ 703.858493][ T8862] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 703.858549][ T8862] f2fs_write_data_pages+0x2a27/0x36f0 [ 703.858623][ T8862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 703.858711][ T8862] ? do_raw_spin_lock+0x12b/0x2f0 [ 703.858760][ T8862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 703.858793][ T8862] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 703.858824][ T8862] ? reacquire_held_locks+0x117/0x1a0 [ 703.858852][ T8862] ? rt_spin_lock+0x1e0/0x400 [ 703.858888][ T8862] ? rt_spin_unlock+0x157/0x200 [ 703.858919][ T8862] ? rt_spin_unlock+0x163/0x200 [ 703.858944][ T8862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 703.858977][ T8862] do_writepages+0x338/0x560 [ 703.859013][ T8862] ? rt_spin_unlock+0x157/0x200 [ 703.859052][ T8862] filemap_fdatawrite+0x1ec/0x2f0 [ 703.859087][ T8862] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 703.859115][ T8862] ? do_raw_spin_lock+0x12b/0x2f0 [ 703.859182][ T8862] ? rt_spin_unlock+0x157/0x200 [ 703.859213][ T8862] ? rt_spin_unlock+0x163/0x200 [ 703.859243][ T8862] f2fs_sync_dirty_inodes+0x30e/0x830 [ 703.859290][ T8862] f2fs_write_checkpoint+0x999/0x26b0 [ 703.859363][ T8862] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 703.859461][ T8862] kill_f2fs_super+0x2dd/0x700 [ 703.859505][ T8862] ? __pfx_kill_f2fs_super+0x10/0x10 [ 703.859552][ T8862] ? call_rcu+0x64b/0x8b0 [ 703.859580][ T8862] ? lockdep_hardirqs_on+0x7a/0x110 [ 703.859629][ T8862] deactivate_locked_super+0xbc/0x110 [ 703.859660][ T8862] cleanup_mnt+0x3d3/0x460 [ 703.859698][ T8862] task_work_run+0x1d9/0x270 [ 703.859726][ T8862] ? __pfx_task_work_run+0x10/0x10 [ 703.859771][ T8862] exit_to_user_mode_loop+0x1fa/0x730 [ 703.859796][ T8862] ? rcu_is_watching+0x15/0xb0 [ 703.859827][ T8862] do_syscall_64+0x33d/0x530 [ 703.859856][ T8862] ? irqentry_exit+0x10f/0x8f0 [ 703.859881][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.859901][ T8862] ? clear_bhb_loop+0x40/0x90 [ 703.859926][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.859944][ T8862] RIP: 0033:0x7f8540faf0d7 [ 703.859964][ T8862] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 703.859981][ T8862] RSP: 002b:00007ffdb347cd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 703.860002][ T8862] RAX: 0000000000000000 RBX: 00007f854104330a RCX: 00007f8540faf0d7 [ 703.860016][ T8862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb347cdf0 [ 703.860028][ T8862] RBP: 00007ffdb347cdf0 R08: 00007ffdb347ddf0 R09: 00000000ffffffff [ 703.860041][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb347de80 [ 703.860053][ T8862] R13: 00007f854104330a R14: 00000000000abb2e R15: 00007ffdb347dec0 [ 703.860086][ T8862] [ 703.860142][ T8862] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 703.877695][T10464] team0: Port device team_slave_1 added [ 704.301692][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 704.386381][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 704.636299][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.636317][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.636347][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.696629][T10579] loop5: detected capacity change from 0 to 128 [ 704.775817][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.775837][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.776138][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.848914][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.849311][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.849596][T10509] bridge_slave_0: entered allmulticast mode [ 704.853057][T10509] bridge_slave_0: entered promiscuous mode [ 704.903189][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.903568][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.903827][T10509] bridge_slave_1: entered allmulticast mode [ 704.909160][T10509] bridge_slave_1: entered promiscuous mode [ 705.140035][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 705.227775][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 705.290775][T10509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.309391][T10582] loop5: detected capacity change from 0 to 512 [ 705.344921][T10582] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.727: inode has both inline data and extents flags [ 705.344958][T10582] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 705.345605][T10582] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.727: couldn't read orphan inode 15 (err -117) [ 705.345638][T10582] loop5: lost filesystem error report for type 5 error -117 [ 705.346269][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 705.346292][ C0] EXT4-fs (loop5): initial error at time 1784308419: ext4_orphan_get:1399: inode 15 [ 705.346325][ C0] EXT4-fs (loop5): last error at time 1784308419: ext4_orphan_get:1404 [ 705.416977][T10582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.425341][T10509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.507410][T10464] hsr_slave_0: entered promiscuous mode [ 705.514430][T10464] hsr_slave_1: entered promiscuous mode [ 705.517582][T10464] debugfs: 'hsr0' already exists in 'hsr' [ 705.517612][T10464] Cannot create hsr debugfs directory [ 705.679540][T10509] team0: Port device team_slave_0 added [ 705.799716][T10509] team0: Port device team_slave_1 added [ 706.275510][ T8862] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.277352][ T1948] bridge_slave_1: left allmulticast mode [ 706.277389][ T1948] bridge_slave_1: left promiscuous mode [ 706.277712][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.361270][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 706.436067][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 706.447870][ T1948] bridge_slave_0: left allmulticast mode [ 706.447904][ T1948] bridge_slave_0: left promiscuous mode [ 706.448166][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.208170][ T1948] bridge_slave_1: left allmulticast mode [ 707.217935][ T1948] bridge_slave_1: left promiscuous mode [ 707.390940][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.818900][T10607] loop5: detected capacity change from 0 to 128 [ 707.871757][ T1948] bridge_slave_0: left allmulticast mode [ 707.871796][ T1948] bridge_slave_0: left promiscuous mode [ 707.872384][T10607] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 707.872548][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.893077][T10607] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.127748][T10609] [ 708.127759][T10609] ====================================================== [ 708.127765][T10609] WARNING: possible circular locking dependency detected [ 708.127771][T10609] syzkaller #0 Not tainted [ 708.127778][T10609] ------------------------------------------------------ [ 708.127783][T10609] syz.5.730/10609 is trying to acquire lock: [ 708.127791][T10609] ffff8880666c8800 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 708.127830][T10609] [ 708.127830][T10609] but task is already holding lock: [ 708.127834][T10609] ffff888026be4cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 708.127863][T10609] [ 708.127863][T10609] which lock already depends on the new lock. [ 708.127863][T10609] [ 708.127867][T10609] [ 708.127867][T10609] the existing dependency chain (in reverse order) is: [ 708.127872][T10609] [ 708.127872][T10609] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 708.127889][T10609] percpu_down_read_internal+0x48/0x1d0 [ 708.127902][T10609] ext4_writepages+0x205/0x3b0 [ 708.127914][T10609] do_writepages+0x338/0x560 [ 708.127930][T10609] __writeback_single_inode+0x12e/0xf90 [ 708.127944][T10609] writeback_single_inode+0x4dd/0xe10 [ 708.127954][T10609] write_inode_now+0x1c2/0x290 [ 708.127964][T10609] iput+0x98b/0xf00 [ 708.127977][T10609] ext4_xattr_block_set+0x1b0c/0x2a80 [ 708.127989][T10609] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 708.128002][T10609] __ext4_expand_extra_isize+0x30d/0x400 [ 708.128014][T10609] __ext4_mark_inode_dirty+0x455/0x700 [ 708.128029][T10609] ext4_evict_inode+0x976/0x10c0 [ 708.128044][T10609] evict+0x624/0xb50 [ 708.128060][T10609] ext4_orphan_cleanup+0xc7a/0x14c0 [ 708.128075][T10609] ext4_fill_super+0x5cc5/0x65d0 [ 708.128089][T10609] get_tree_bdev_flags+0x430/0x4f0 [ 708.128105][T10609] vfs_get_tree+0x92/0x2a0 [ 708.128120][T10609] do_new_mount+0x319/0xdc0 [ 708.128132][T10609] __se_sys_mount+0x31d/0x420 [ 708.128144][T10609] do_syscall_64+0x17b/0x530 [ 708.128170][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.128182][T10609] [ 708.128182][T10609] -> #0 (sb_internal){.+.+}-{0:0}: [ 708.128197][T10609] __lock_acquire+0x15ff/0x2e40 [ 708.128210][T10609] lock_acquire+0x115/0x350 [ 708.128221][T10609] percpu_down_read_internal+0x48/0x1d0 [ 708.128235][T10609] ext4_evict_inode+0x426/0x10c0 [ 708.128249][T10609] evict+0x624/0xb50 [ 708.128265][T10609] ext4_ext_migrate+0xddf/0x10e0 [ 708.128277][T10609] ext4_ioctl+0x234f/0x4b80 [ 708.128291][T10609] __se_sys_ioctl+0xff/0x170 [ 708.128308][T10609] do_syscall_64+0x17b/0x530 [ 708.128324][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.128335][T10609] [ 708.128335][T10609] other info that might help us debug this: [ 708.128335][T10609] [ 708.128339][T10609] Possible unsafe locking scenario: [ 708.128339][T10609] [ 708.128343][T10609] CPU0 CPU1 [ 708.128347][T10609] ---- ---- [ 708.128350][T10609] lock(&sbi->s_writepages_rwsem); [ 708.128359][T10609] lock(sb_internal); [ 708.128368][T10609] lock(&sbi->s_writepages_rwsem); [ 708.128376][T10609] rlock(sb_internal); [ 708.128384][T10609] [ 708.128384][T10609] *** DEADLOCK *** [ 708.128384][T10609] [ 708.128387][T10609] locks held by syz.5.730/10609: 3, last CPU#1: [ 708.128397][T10609] #0: ffff8880666c8510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 708.128433][T10609] #1: ffff88806ca91000 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x2347/0x4b80 [ 708.128467][T10609] #2: ffff888026be4cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 708.128495][T10609] [ 708.128495][T10609] stack backtrace: [ 708.128503][T10609] CPU: 1 UID: 0 PID: 10609 Comm: syz.5.730 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 708.128518][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 708.128525][T10609] Call Trace: [ 708.128530][T10609] [ 708.128535][T10609] dump_stack_lvl+0xe8/0x150 [ 708.128553][T10609] print_circular_bug+0x2e2/0x300 [ 708.128571][T10609] check_noncircular+0x12f/0x150 [ 708.128589][T10609] __lock_acquire+0x15ff/0x2e40 [ 708.128605][T10609] ? __lock_acquire+0x6df/0x2e40 [ 708.128619][T10609] ? __asan_memset+0x22/0x50 [ 708.128637][T10609] lock_acquire+0x115/0x350 [ 708.128649][T10609] ? ext4_evict_inode+0x426/0x10c0 [ 708.128668][T10609] percpu_down_read_internal+0x48/0x1d0 [ 708.128681][T10609] ? ext4_evict_inode+0x426/0x10c0 [ 708.128697][T10609] ext4_evict_inode+0x426/0x10c0 [ 708.128714][T10609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 708.128731][T10609] ? __pfx_ext4_evict_inode+0x10/0x10 [ 708.128746][T10609] ? rt_spin_unlock+0x157/0x200 [ 708.128760][T10609] ? rt_spin_unlock+0x163/0x200 [ 708.128773][T10609] ? __pfx_ext4_evict_inode+0x10/0x10 [ 708.128789][T10609] evict+0x624/0xb50 [ 708.128808][T10609] ? __pfx_evict+0x10/0x10 [ 708.128825][T10609] ? rt_spin_unlock+0x163/0x200 [ 708.128839][T10609] ? iput+0xb84/0xf00 [ 708.128853][T10609] ext4_ext_migrate+0xddf/0x10e0 [ 708.128870][T10609] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 708.128884][T10609] ? rwbase_write_lock+0x550/0x720 [ 708.128897][T10609] ext4_ioctl+0x234f/0x4b80 [ 708.128913][T10609] ? __pfx_ext4_ioctl+0x10/0x10 [ 708.128928][T10609] ? is_bpf_text_address+0x292/0x2b0 [ 708.128944][T10609] ? is_bpf_text_address+0x26/0x2b0 [ 708.128959][T10609] ? kernel_text_address+0xa5/0xe0 [ 708.128972][T10609] ? __kernel_text_address+0xd/0x30 [ 708.128983][T10609] ? unwind_get_return_address+0x4d/0x90 [ 708.128997][T10609] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.129010][T10609] ? arch_stack_walk+0xfb/0x150 [ 708.129025][T10609] ? stack_trace_save+0xa9/0x100 [ 708.129037][T10609] ? __pfx_stack_trace_save+0x10/0x10 [ 708.129048][T10609] ? kasan_save_track+0x4f/0x80 [ 708.129060][T10609] ? stack_depot_save_flags+0x33/0x800 [ 708.129075][T10609] ? __lock_acquire+0x6df/0x2e40 [ 708.129089][T10609] ? kasan_save_track+0x4f/0x80 [ 708.129099][T10609] ? kasan_save_track+0x3e/0x80 [ 708.129109][T10609] ? kasan_save_free_info+0x40/0x50 [ 708.129125][T10609] ? __kasan_slab_free+0x5c/0x80 [ 708.129136][T10609] ? kfree+0x1c5/0x6c0 [ 708.129152][T10609] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 708.129176][T10609] ? security_file_ioctl+0xb9/0x260 [ 708.129192][T10609] ? __se_sys_ioctl+0x47/0x170 [ 708.129209][T10609] ? do_syscall_64+0x17b/0x530 [ 708.129225][T10609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.129241][T10609] ? file_ioctl+0x259/0x7e0 [ 708.129259][T10609] ? __pfx_file_ioctl+0x10/0x10 [ 708.129280][T10609] ? kasan_quarantine_put+0xbb/0x1f0 [ 708.129301][T10609] ? tomoyo_path_number_perm+0x219/0x5f0 [ 708.129319][T10609] ? do_vfs_ioctl+0x1184/0x1550 [ 708.129337][T10609] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 708.129359][T10609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 708.129381][T10609] ? __fget_files+0x2a/0x420 [ 708.129396][T10609] ? __fget_files+0x3a8/0x420 [ 708.129409][T10609] ? __fget_files+0x2a/0x420 [ 708.129423][T10609] ? bpf_lsm_file_ioctl+0x9/0x20 [ 708.129436][T10609] ? __pfx_ext4_ioctl+0x10/0x10 [ 708.129450][T10609] __se_sys_ioctl+0xff/0x170 [ 708.129468][T10609] do_syscall_64+0x17b/0x530 [ 708.129485][T10609] ? irqentry_exit+0x10f/0x8f0 [ 708.129502][T10609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.129513][T10609] ? clear_bhb_loop+0x40/0x90 [ 708.129526][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.129538][T10609] RIP: 0033:0x7f8540fade99 [ 708.129550][T10609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.129561][T10609] RSP: 002b:00007f853f1e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.129573][T10609] RAX: ffffffffffffffda RBX: 00007f8541236090 RCX: 00007f8540fade99 [ 708.129583][T10609] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005 [ 708.129590][T10609] RBP: 00007f8541043eaf R08: 0000000000000000 R09: 0000000000000000 [ 708.129598][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.129605][T10609] R13: 00007f8541236128 R14: 00007f8541236090 R15: 00007ffdb347dac8 [ 708.129618][T10609] [ 708.746650][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.826568][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.849102][ T1948] bond0 (unregistering): Released all slaves [ 709.029463][ T8862] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.080951][ T8862] Flush: task=syz-executor[8862] dev=loop5 state=2 [ 709.195983][ T8862] Teardown: task=syz-executor[8862] dev=loop5 state=2 [ 709.366279][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.446729][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.467036][ T1948] bond0 (unregistering): Released all slaves [ 709.672485][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 709.674512][T10509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.674528][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.674556][T10509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.732068][T10509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.732087][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.732116][T10509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.889674][T10509] hsr_slave_0: entered promiscuous mode [ 709.891447][T10509] hsr_slave_1: entered promiscuous mode [ 709.892990][T10509] debugfs: 'hsr0' already exists in 'hsr' [ 709.893010][T10509] Cannot create hsr debugfs directory [ 709.988763][T10393] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 710.030368][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.051978][T10393] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 710.090925][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.115438][T10393] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 710.148455][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.287850][T10464] netdevsim netdevsim9 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 710.328074][T10393] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 710.348500][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.527125][ T1948] hsr_slave_0: left promiscuous mode [ 710.565999][ T1948] hsr_slave_1: left promiscuous mode [ 710.567139][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.606467][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.786014][ T1948] hsr_slave_0: left promiscuous mode [ 710.806055][ T1948] hsr_slave_1: left promiscuous mode [ 710.806686][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.846803][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.906733][ T1948] veth1_vlan: left promiscuous mode [ 710.906875][ T1948] veth0_vlan: left promiscuous mode [ 711.220041][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 711.256360][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 711.496367][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 711.536741][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 711.727881][T10464] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 711.815548][T10332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.857746][T10332] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.907501][T10464] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 711.947977][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.948032][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.973472][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.973550][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.112077][T10464] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 712.201320][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.261572][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.275152][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.275374][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.292315][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.292443][ T8578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.557264][T10332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.732327][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.892859][T10464] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 713.928213][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 713.930875][T10464] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 713.968477][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 713.971412][T10464] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 714.008269][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.014986][T10464] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 714.048819][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.146065][ T1948] bridge_slave_1: left allmulticast mode [ 714.146096][ T1948] bridge_slave_1: left promiscuous mode [ 714.146306][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.306824][ T1948] bridge_slave_0: left allmulticast mode [ 714.306857][ T1948] bridge_slave_0: left promiscuous mode [ 714.306985][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.926458][ T1948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.006519][ T1948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.066750][ T1948] bond0 (unregistering): Released all slaves [ 715.171346][T10509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 715.208513][T10509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.215002][T10509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.248406][T10509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.253778][T10509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.288529][T10509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.292749][T10509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.329687][T10509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.341292][T10332] veth0_vlan: entered promiscuous mode [ 715.465966][ T1948] hsr_slave_0: left promiscuous mode [ 715.506010][ T1948] hsr_slave_1: left promiscuous mode [ 715.506717][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.526541][ T1948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.816857][ T1948] team0 (unregistering): Port device team_slave_1 removed [ 715.836769][ T1948] team0 (unregistering): Port device team_slave_0 removed [ 715.959776][T10332] veth1_vlan: entered promiscuous mode [ 715.971782][T10393] veth0_vlan: entered promiscuous mode [ 716.011715][T10393] veth1_vlan: entered promiscuous mode [ 716.077273][T10332] veth0_macvtap: entered promiscuous mode [ 716.098273][T10332] veth1_macvtap: entered promiscuous mode [ 716.134018][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.135448][T10393] veth0_macvtap: entered promiscuous mode [ 716.161726][T10393] veth1_macvtap: entered promiscuous mode [ 716.179597][T10332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.202215][T10332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.204612][T10464] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.230020][T10509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.242985][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.243059][ T8580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.244862][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.244944][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.250061][ T8580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.271212][ T8580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.285011][ T8580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.292644][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.293876][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.293961][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.359509][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.362126][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.364237][T10509] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.395032][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.410200][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.472503][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.472560][ T8576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.492428][T10332] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 716.540866][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.540920][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.595299][ T8580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.595321][ T8580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.628638][T10332] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 716.670360][T10393] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 716.687211][ T8579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.687232][ T8579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.740747][ T8579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.740769][ T8579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.750763][T10393] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 716.820680][ T8580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.820702][ T8580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.248707][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.389359][T10509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.472850][T10509] veth0_vlan: entered promiscuous mode [ 717.493364][T10509] veth1_vlan: entered promiscuous mode [ 717.544617][T10509] veth0_macvtap: entered promiscuous mode [ 717.563550][T10509] veth1_macvtap: entered promiscuous mode [ 717.589799][T10464] veth0_vlan: entered promiscuous mode [ 717.602454][T10509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.623283][T10509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.624132][T10464] veth1_vlan: entered promiscuous mode [ 717.649607][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.656427][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.670259][ T1948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.672221][ T1948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.782777][T10464] veth0_macvtap: entered promiscuous mode [ 717.792572][T10464] veth1_macvtap: entered promiscuous mode [ 717.833233][T10509] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 717.870315][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.870336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.874182][T10464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.902547][T10509] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 717.924163][T10464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.941864][ T8578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.941885][ T8578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.954772][ T8576] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.973013][ T8576] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.975539][ T8576] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.996774][ T8576] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.081478][T10509] Flush: task=syz-executor[10509] dev=loop1 state=2