last executing test programs: 9m49.196175692s ago: executing program 3 (id=16): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 9m47.976916552s ago: executing program 3 (id=18): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x1d, 0x7, 0x1, 0x0, "699d92dc9fd264507cda877def7e908a1688e9100ed3956433"}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xa14}, @NFTA_SET_EXPRESSIONS={0x4}]}, @NFT_MSG_DELOBJ={0x158, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x78, 0x8, "50433837908efc3c2fc07c2d2a133acca75ed38f21f44b61c9aeb0c655b704aa5458372ae4286db8da0dd2e0be3e1a342272a8d1f0129bc69d2f261ce4b13d323cf554d2d3b542a84ed5e53a9e4c39edf99b862ff621cb4ef77556dccbd9101394d4f9126d214be874dae188368aa01c897f8606"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xa8, 0x8, "4073acae1edc8ed2452abd587b76f44f70341c8555b1a3cca5ad0d9b04becb4a755945e01d5893c0719689203bc251e0fbd410db3539abb3170f686ea5dd56a0d3aa17594dfb4e04f2d0eae8d077e4a89f37440482b28dca515ec1465f80e8e4b945702eb58d7b7fd8228df62970b36b065c85d20c0d86114f0e9f0261609b957632a664c69075fb9756b7dddefcc7fe4b7a7a0f586fd312192a3462422a23b0b144e201"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x280}, 0x1, 0x0, 0x0, 0x8000000}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 9m36.331255114s ago: executing program 3 (id=32): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) close_range(r2, 0xffffffffffffffff, 0x0) 9m27.057214912s ago: executing program 4 (id=40): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x181100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r1, 0x0, 0x1, 0x6, 0x4, 0x1000}, &(0x7f00000000c0)=0x14) 9m26.109216036s ago: executing program 4 (id=42): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x804) 9m24.553827218s ago: executing program 3 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x2000c890) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0xf0}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0000, 0x8000, 0x8, 0x8, 0x0, [{0x6, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x46}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0xd6, '\x00', 0x8d}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0x4, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xb5, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x9, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x9}, {0x0, 0x5, 0x0, '\x00', 0xf1}, {0xa, 0x5, 0x2f, '\x00', 0xff}, {0x8}]}}) 9m24.553512322s ago: executing program 4 (id=46): recvmmsg(0xffffffffffffffff, &(0x7f0000008640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000007c0)=""/148, 0x94}], 0x2}}], 0x1, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 9m23.701563916s ago: executing program 3 (id=47): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0xa, &(0x7f0000000680)={0x0, 0x34b, 0x800, 0x2, 0x2d, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 9m23.043452581s ago: executing program 2 (id=48): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 9m22.591693206s ago: executing program 4 (id=49): r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9m22.106293219s ago: executing program 3 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0x0, 0x3, 0x4777) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r11, &(0x7f0000000c80)={&(0x7f0000000b00)={0xa, 0x4e23, 0x4, @empty, 0x8}, 0x1c, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2}, 0x4040004) 9m21.705241386s ago: executing program 2 (id=51): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) 9m21.52092763s ago: executing program 4 (id=52): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r2, 0x0, 0x1, 0x6, 0x4, 0x1000}, &(0x7f00000000c0)=0x14) 9m20.718721921s ago: executing program 2 (id=53): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 9m19.855009789s ago: executing program 4 (id=54): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m19.757816329s ago: executing program 2 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) 9m18.848779971s ago: executing program 2 (id=56): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x2, 0x141202) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000002c0)={0x0, 0x0, 0x3002, 0x2, 0x1, 0x2000}) 9m17.897232521s ago: executing program 2 (id=58): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0xced}], 0x1, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfe, 0x1}, {0xe, 0x4}, 0x2005, 0xbfb5}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0x1000809d) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$PTP_PIN_GETFUNC2(r7, 0xc0603d0f, 0x0) syz_usb_connect(0x2, 0x4ae, &(0x7f0000001280)=ANY=[@ANYRESDEC=r6, @ANYBLOB="8034e87447861dfe895fc8bf7e14e06d82b23100003cff2d901497140dff3df24eaab55a170f3baf3b86c96d8adc6a77c00ca812d6af7bcd4167f64d9a5ab7c8d721afed3ea867480c00009b010000000000", @ANYRES8=r5, @ANYRESHEX], 0x0) 9m2.727354534s ago: executing program 32 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0x0, 0x3, 0x4777) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r11, &(0x7f0000000c80)={&(0x7f0000000b00)={0xa, 0x4e23, 0x4, @empty, 0x8}, 0x1c, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2}, 0x4040004) 9m1.995017934s ago: executing program 33 (id=58): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0xced}], 0x1, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfe, 0x1}, {0xe, 0x4}, 0x2005, 0xbfb5}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0x1000809d) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$PTP_PIN_GETFUNC2(r7, 0xc0603d0f, 0x0) syz_usb_connect(0x2, 0x4ae, &(0x7f0000001280)=ANY=[@ANYRESDEC=r6, @ANYBLOB="8034e87447861dfe895fc8bf7e14e06d82b23100003cff2d901497140dff3df24eaab55a170f3baf3b86c96d8adc6a77c00ca812d6af7bcd4167f64d9a5ab7c8d721afed3ea867480c00009b010000000000", @ANYRES8=r5, @ANYRESHEX], 0x0) 9m1.426171272s ago: executing program 34 (id=54): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m51.968537292s ago: executing program 0 (id=652): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m50.010094902s ago: executing program 0 (id=656): ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) 2m49.420600137s ago: executing program 0 (id=658): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f00000001c0), &(0x7f0000000300)) select(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007180), 0x0, 0x10000, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'wlc\x00', 0x5, 0x1, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) shutdown(0xffffffffffffffff, 0x0) 2m47.671169478s ago: executing program 0 (id=660): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = add_key$keyring(0x0, &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000940)='big_key\x00', &(0x7f0000000980)='\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 2m46.575221837s ago: executing program 0 (id=662): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0xe20, @empty}, 0x10) 2m45.987761874s ago: executing program 0 (id=664): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x2, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) 2m30.762181783s ago: executing program 35 (id=664): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x2, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) 40.19612133s ago: executing program 7 (id=929): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) 34.969372567s ago: executing program 7 (id=938): syz_io_uring_setup(0x837, &(0x7f0000000240)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 32.962515664s ago: executing program 7 (id=943): openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 31.980776587s ago: executing program 7 (id=946): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r0 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r0, 0x12) waitid(0x1, r0, 0x0, 0x8100000e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x84, 0x0, 0xfffffffffffffffe, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x590, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 30.554312323s ago: executing program 7 (id=952): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$cdc_ncm(0xae87d0cb0ee74271, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x1f, 0x3fffe, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8005}}, 0x50) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 28.761724729s ago: executing program 7 (id=955): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000008880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="4839fc1cb9e7fceeb8bf92652e", 0xd}, {&(0x7f0000001e00)="8a5ca710df5494002afd08e7fe361dbabfb1b4199959f375d11fcb0f3d3552446ff2d014f7d4661d6c27eba83888b8382adca4b0097694429fe7fcea338a1bfe37c28d320b6bf7756c60720e2365f521fd384b09c0491ac2ae1f96bfa9793800b9a767a52f545920afaebb37ea22a4db07b319440a1c5f1ccfdc49f08c06494fdb541c8c4cf85dcff44ffaa0741fa2e493a90cf93da7a171ab043f2ecbed7451c8ad6af2a4924228fa27c7f296099957ae7058bd73542f96b1f9e4a9675e6ed089f4c9e210be4efe4399bfff42e61f3f59663a0e816bcb3d7ddd053ae7e76eee6bc240b3ba1d0ae2507d5fdc47e02fafca01c1bf9f34b9a5f5d347c85e1b0f43eda9f6a6071c5989f2ed697375aa87e3c67ba6423a7374ed86b1fe5b8576315874a06abaef480abb05cb9f3de7b6b56c9fea3645c4e87ed95e661ab20188efc83ccbeb700c5bc5709545aade6470ec5544ac50272300b9029ea49e3e8140d3ed7436cd74ecf375b9f19d5f49c6718bf7e0ed6ee894c52e73c29cbe05c34f50ca83a6d83e46a96c694a37355eac03427980fd2d1679a1251d9c41405ed9d59506cbe8c04a9eeb6a5f093069f73e8553b0af0d6e7d50d7a23fb9543c9afb860e2aed214cb3dc810322fc266f1be50eff296cadcc8138092701085008c5f5bc81f1b81acc645bed6a2b90e0032378c35ab609d1f79534c99449ebe07af1493dc11d554dadf9ba9bd50a0c880b3a689aa85f52606a81af6e3993a3b7836643ac9d26376bc11c806d2931f17cc3e730dd0ca1deecb230cc317efc8ded574acbdcca5f26e9373020a14be7eca6a016cfba6febb7f58b7ed53af74e7f55203ae6b13d76b1ecbd2f7bb800e400a78b9d749efb929f295066cddf6946d8bdac9c7f19b5fbe9b10265bdfae39a9aae44f68e7b887aa72856e1b4dbec0c51462268e9c8027a3c0d3038827017917d0f4f64c3cff7933f16f28193b8ae197e9fef137076850d5817b39dd2aaf751ee748c26bd9f6215de066557cf3b9dd3ff4517fc212e5edb7d883a197995d81c5103f07ce498a1149bc413090cfc5f152fcf0ece10ec14236374c49c2877f28e71b3d211fbe3946f8eae0a204dea328703f1317399d66b31531b437a3ffd6d7d2c63b7c54c63ecf78d727a42884caaa70ff6b7abcf9fcb77641e9f6c4ed714ce79edc99e2bfb8c9461e7a8d664da4641ba346ffe32defd5d94ad9b929a2ec4ea3ce8c895e56e9503f2582ff7a2efa58695fe031113a6f76f3309e33faed79a6f1278fa9353348555e620f7c74e3bd44100b461457f7d44c5469299623d794c8151fb2486d9d51d47268c3554393c72b5351c4dd1a597bc6cca0d8ade7508729fb6dee9b584fc6e66fac7ff4763001db9eeac7a4f760d6ae5bbb644ac013ca5e70b34a4c3ff63a8dfd9aa9fb3ba9fb2755d9161ca527a9e6cfd5b0fb2f5765c684698c74d54649dc431d1f11473cab7ace3ad4dce980a0d8290da61e6a1500c2eae730c16829900d7df1f9d7b8367fe75cd3528ad82ce54a41159d7d530f2773b87121a2f6e2a56d5495cb3d436e32000aff4de12dbed18e2e10ee162713ae453c9c66fd899da3e4fbdfe2e4a01d3c268a1bf4f0c418395cd6eb375b065cc21960359e534ef2048d65be53ab0712cd4285c69c3c6701d93ab3f1d5117699a23c0e8a0cb30ffef68fcbad2116e9d35c8cbd771350b38164bcf33e4bbb00c3921725dc1b9c270a0295c951a7358bdde4f4b5c637a68cf3af85817fd2cbc42469a", 0x4e7}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000084000000070000000a01010200000000180000000000000084000000060000007b0100000000000018"], 0x48, 0x20000004}], 0x1, 0x4000000) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa55", 0xc9}], 0x1}}], 0x2, 0x2090) 24.814219432s ago: executing program 36 (id=955): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000008880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="4839fc1cb9e7fceeb8bf92652e", 0xd}, {&(0x7f0000001e00)="8a5ca710df5494002afd08e7fe361dbabfb1b4199959f375d11fcb0f3d3552446ff2d014f7d4661d6c27eba83888b8382adca4b0097694429fe7fcea338a1bfe37c28d320b6bf7756c60720e2365f521fd384b09c0491ac2ae1f96bfa9793800b9a767a52f545920afaebb37ea22a4db07b319440a1c5f1ccfdc49f08c06494fdb541c8c4cf85dcff44ffaa0741fa2e493a90cf93da7a171ab043f2ecbed7451c8ad6af2a4924228fa27c7f296099957ae7058bd73542f96b1f9e4a9675e6ed089f4c9e210be4efe4399bfff42e61f3f59663a0e816bcb3d7ddd053ae7e76eee6bc240b3ba1d0ae2507d5fdc47e02fafca01c1bf9f34b9a5f5d347c85e1b0f43eda9f6a6071c5989f2ed697375aa87e3c67ba6423a7374ed86b1fe5b8576315874a06abaef480abb05cb9f3de7b6b56c9fea3645c4e87ed95e661ab20188efc83ccbeb700c5bc5709545aade6470ec5544ac50272300b9029ea49e3e8140d3ed7436cd74ecf375b9f19d5f49c6718bf7e0ed6ee894c52e73c29cbe05c34f50ca83a6d83e46a96c694a37355eac03427980fd2d1679a1251d9c41405ed9d59506cbe8c04a9eeb6a5f093069f73e8553b0af0d6e7d50d7a23fb9543c9afb860e2aed214cb3dc810322fc266f1be50eff296cadcc8138092701085008c5f5bc81f1b81acc645bed6a2b90e0032378c35ab609d1f79534c99449ebe07af1493dc11d554dadf9ba9bd50a0c880b3a689aa85f52606a81af6e3993a3b7836643ac9d26376bc11c806d2931f17cc3e730dd0ca1deecb230cc317efc8ded574acbdcca5f26e9373020a14be7eca6a016cfba6febb7f58b7ed53af74e7f55203ae6b13d76b1ecbd2f7bb800e400a78b9d749efb929f295066cddf6946d8bdac9c7f19b5fbe9b10265bdfae39a9aae44f68e7b887aa72856e1b4dbec0c51462268e9c8027a3c0d3038827017917d0f4f64c3cff7933f16f28193b8ae197e9fef137076850d5817b39dd2aaf751ee748c26bd9f6215de066557cf3b9dd3ff4517fc212e5edb7d883a197995d81c5103f07ce498a1149bc413090cfc5f152fcf0ece10ec14236374c49c2877f28e71b3d211fbe3946f8eae0a204dea328703f1317399d66b31531b437a3ffd6d7d2c63b7c54c63ecf78d727a42884caaa70ff6b7abcf9fcb77641e9f6c4ed714ce79edc99e2bfb8c9461e7a8d664da4641ba346ffe32defd5d94ad9b929a2ec4ea3ce8c895e56e9503f2582ff7a2efa58695fe031113a6f76f3309e33faed79a6f1278fa9353348555e620f7c74e3bd44100b461457f7d44c5469299623d794c8151fb2486d9d51d47268c3554393c72b5351c4dd1a597bc6cca0d8ade7508729fb6dee9b584fc6e66fac7ff4763001db9eeac7a4f760d6ae5bbb644ac013ca5e70b34a4c3ff63a8dfd9aa9fb3ba9fb2755d9161ca527a9e6cfd5b0fb2f5765c684698c74d54649dc431d1f11473cab7ace3ad4dce980a0d8290da61e6a1500c2eae730c16829900d7df1f9d7b8367fe75cd3528ad82ce54a41159d7d530f2773b87121a2f6e2a56d5495cb3d436e32000aff4de12dbed18e2e10ee162713ae453c9c66fd899da3e4fbdfe2e4a01d3c268a1bf4f0c418395cd6eb375b065cc21960359e534ef2048d65be53ab0712cd4285c69c3c6701d93ab3f1d5117699a23c0e8a0cb30ffef68fcbad2116e9d35c8cbd771350b38164bcf33e4bbb00c3921725dc1b9c270a0295c951a7358bdde4f4b5c637a68cf3af85817fd2cbc42469a", 0x4e7}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000084000000070000000a01010200000000180000000000000084000000060000007b0100000000000018"], 0x48, 0x20000004}], 0x1, 0x4000000) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa55", 0xc9}], 0x1}}], 0x2, 0x2090) 12.426055112s ago: executing program 8 (id=990): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000180)=@in6={0xa, 0x4e27, 0x81, @mcast2, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x41840) 11.606910814s ago: executing program 8 (id=994): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b", 0x52}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae406", 0x48}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)}], 0x5) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(0x0, 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 9.723516813s ago: executing program 8 (id=999): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 8.656686766s ago: executing program 8 (id=1002): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a07"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 7.945230475s ago: executing program 5 (id=1004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a0101010000000000000000000000000000ecdf001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) 7.726623802s ago: executing program 8 (id=1005): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x23b, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0xa}) 6.399381139s ago: executing program 5 (id=1007): sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5.50883847s ago: executing program 6 (id=1008): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 5.206713955s ago: executing program 1 (id=1009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b", 0x52}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae406", 0x48}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)}], 0x5) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 5.133906768s ago: executing program 5 (id=1010): socket$unix(0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 4.6282384s ago: executing program 6 (id=1011): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3.876308532s ago: executing program 6 (id=1012): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x200ffffffff, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 3.74109283s ago: executing program 1 (id=1013): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000008800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f00000004c0)=""/4098, 0x40f00}, 0x94) 3.198570335s ago: executing program 5 (id=1014): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a07"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 2.825079341s ago: executing program 1 (id=1015): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000180)=@in6={0xa, 0x4e27, 0x81, @mcast2, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x41840) 2.723320042s ago: executing program 6 (id=1016): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0xa, 0x3, 0xffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 2.538799736s ago: executing program 8 (id=1017): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.10245425s ago: executing program 5 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x24000080) 2.03467715s ago: executing program 1 (id=1019): sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.450669785s ago: executing program 6 (id=1020): recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)}, 0x8}], 0x1, 0x40000020, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e3f, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0xc000) 1.055803413s ago: executing program 1 (id=1021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000002000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 822.621717ms ago: executing program 5 (id=1022): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b", 0x52}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae406", 0x48}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)}], 0x5) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 761.712716ms ago: executing program 6 (id=1023): socket$unix(0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 0s ago: executing program 1 (id=1024): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x40080}, 0x200400d1) kernel console output (not intermixed with test programs): ] team0 (unregistering): Port device team_slave_1 removed [ 503.590416][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 505.516472][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.350'. [ 505.599585][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.5.350'. [ 505.675049][ T7537] fuse: Unknown parameter 'group_id00000000000000000000' [ 506.662068][ T7269] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 506.756301][ T29] audit: type=1326 audit(1772699696.508:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.5.354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ef2f9c799 code=0x0 [ 506.783724][ T7269] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 507.102291][ T7269] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 507.770734][ T7552] syzkaller0: entered promiscuous mode [ 507.803200][ T7552] syzkaller0: entered allmulticast mode [ 507.841947][ T7269] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 510.237556][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 510.339845][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 510.350303][ T7285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 510.447719][ T7586] loop5: detected capacity change from 0 to 736 [ 510.503311][ T7586] iso9660: Unknown parameter 'no[ock' [ 510.535059][ T7285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 510.862471][ T7285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 511.166572][ T7285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 511.434268][ T29] audit: type=1326 audit(1772699701.180:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f560bd9c799 code=0x0 [ 511.847032][ T7269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.153006][ T7269] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.328624][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.336386][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.499930][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.507784][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.321217][ T7616] loop5: detected capacity change from 0 to 128 [ 513.535644][ T29] audit: type=1800 audit(1772699703.261:18): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.371" name="file2" dev="loop5" ino=1048610 res=0 errno=0 [ 513.897318][ T7623] loop1: detected capacity change from 0 to 256 [ 514.274552][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.671201][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.756544][ T7632] loop5: detected capacity change from 0 to 256 [ 514.842185][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.850027][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.133860][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.141613][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.330311][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.340876][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.933771][ T7269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.074428][ T29] audit: type=1326 audit(1772699706.833:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.5.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ef2f9c799 code=0x0 [ 518.077354][ T7664] loop1: detected capacity change from 0 to 512 [ 518.354250][ T7664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.442971][ T7664] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 518.608424][ T7664] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.383: corrupted inode contents [ 518.715972][ T7664] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.383: mark_inode_dirty error [ 518.856896][ T7664] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.383: corrupted inode contents [ 518.902332][ T7664] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.383: mark_inode_dirty error [ 518.972477][ T7680] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.383: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 518.972477][ T7680] [ 519.093314][ T7682] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #18: comm syz.1.383: directory missing '.' [ 519.326904][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.647090][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.682676][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 520.333841][ T7692] bridge1: port 1(veth3) entered blocking state [ 520.362527][ T7692] bridge1: port 1(veth3) entered disabled state [ 520.380702][ T7692] veth3: entered allmulticast mode [ 520.408912][ T7692] veth3: entered promiscuous mode [ 520.635909][ T7696] bridge1: port 2(veth5) entered blocking state [ 520.644264][ T7696] bridge1: port 2(veth5) entered disabled state [ 520.651677][ T7696] veth5: entered allmulticast mode [ 520.664486][ T7696] veth5: entered promiscuous mode [ 521.304039][ T7269] veth0_vlan: entered promiscuous mode [ 521.523718][ T7269] veth1_vlan: entered promiscuous mode [ 522.201939][ T7269] veth0_macvtap: entered promiscuous mode [ 522.321945][ T7269] veth1_macvtap: entered promiscuous mode [ 522.598364][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.961475][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.184926][ T7729] bond0: entered promiscuous mode [ 523.215527][ T7729] bond_slave_0: entered promiscuous mode [ 523.245446][ T7729] bond_slave_1: entered promiscuous mode [ 523.295085][ T7729] batadv0: entered promiscuous mode [ 523.311680][ T7729] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 523.346686][ T7729] bond0: left promiscuous mode [ 523.370841][ T7729] bond_slave_0: left promiscuous mode [ 523.377672][ T7729] bond_slave_1: left promiscuous mode [ 523.440007][ T7729] batadv0: left promiscuous mode [ 523.729258][ T3420] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.761099][ T3420] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.876826][ T3420] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.901633][ T3420] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.251992][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 524.904973][ T7285] veth0_vlan: entered promiscuous mode [ 525.017431][ T7743] bridge2: port 1(veth7) entered blocking state [ 525.027560][ T7743] bridge2: port 1(veth7) entered disabled state [ 525.059654][ T7743] veth7: entered allmulticast mode [ 525.083410][ T7743] veth7: entered promiscuous mode [ 525.365980][ T7285] veth1_vlan: entered promiscuous mode [ 526.042177][ T7285] veth0_macvtap: entered promiscuous mode [ 526.143560][ T7285] veth1_macvtap: entered promiscuous mode [ 526.576515][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.749804][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.021099][ T700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.077504][ T700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.148431][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.325084][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.434116][ T7777] loop5: detected capacity change from 0 to 512 [ 527.797212][ T7777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.988710][ T7777] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 528.191018][ T7777] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.406: corrupted inode contents [ 528.305699][ T7777] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.406: mark_inode_dirty error [ 528.399059][ T7777] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.406: corrupted inode contents [ 528.582520][ T7777] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.406: mark_inode_dirty error [ 528.666037][ T7789] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.406: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 528.666037][ T7789] [ 528.839145][ T7791] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #18: comm syz.5.406: directory missing '.' [ 529.134941][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.146049][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.158764][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.197063][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.218771][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.622035][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.152527][ T5782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 530.164688][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 530.189001][ T5782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 530.200530][ T5782] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 530.242685][ T5782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 530.258496][ T5782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 530.690038][ T7806] bridge1: port 1(veth0_to_bond) entered blocking state [ 530.730084][ T7806] bridge1: port 1(veth0_to_bond) entered disabled state [ 530.761263][ T7806] veth0_to_bond: entered allmulticast mode [ 530.876331][ T7806] veth0_to_bond: entered promiscuous mode [ 531.268305][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 531.343105][ T5782] Bluetooth: hci4: command tx timeout [ 532.375292][ T5782] Bluetooth: hci6: command tx timeout [ 533.226872][ T7832] loop1: detected capacity change from 0 to 512 [ 533.341452][ T3429] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.414978][ T5782] Bluetooth: hci4: command tx timeout [ 533.572867][ T7832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.626054][ T7832] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.789271][ T7832] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.419: corrupted inode contents [ 533.977038][ T7832] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.419: mark_inode_dirty error [ 533.987361][ T3429] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.042459][ T7832] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.419: corrupted inode contents [ 534.073739][ T7832] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.419: mark_inode_dirty error [ 534.299756][ T3429] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.454314][ T5782] Bluetooth: hci6: command tx timeout [ 534.557054][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.739700][ T3429] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.202687][ T7796] chnl_net:caif_netlink_parms(): no params data found [ 535.521146][ T5782] Bluetooth: hci4: command tx timeout [ 536.543315][ T5782] Bluetooth: hci6: command tx timeout [ 536.656097][ T7802] chnl_net:caif_netlink_parms(): no params data found [ 537.288936][ T3429] bridge_slave_1: left allmulticast mode [ 537.340503][ T3429] bridge_slave_1: left promiscuous mode [ 537.373687][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.524279][ T3429] bridge_slave_0: left allmulticast mode [ 537.530176][ T3429] bridge_slave_0: left promiscuous mode [ 537.574686][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.592801][ T5782] Bluetooth: hci4: command tx timeout [ 538.070018][ T7884] loop1: detected capacity change from 0 to 512 [ 538.256577][ T7884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.332397][ T7884] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 538.521330][ T7884] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.430: corrupted inode contents [ 538.534856][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.431'. [ 538.568057][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.431'. [ 538.574145][ T7884] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.430: mark_inode_dirty error [ 538.612180][ T5782] Bluetooth: hci6: command tx timeout [ 538.650342][ T7884] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.430: corrupted inode contents [ 538.720697][ T7884] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.430: mark_inode_dirty error [ 538.856426][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.927100][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.956588][ T3429] bond0 (unregistering): Released all slaves [ 539.105252][ T7891] dummy0: entered promiscuous mode [ 539.144661][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.195683][ T7891] team0: entered promiscuous mode [ 539.218457][ T7891] team_slave_0: entered promiscuous mode [ 539.303407][ T7891] team_slave_1: entered promiscuous mode [ 539.622580][ T3429] hsr_slave_0: left promiscuous mode [ 539.704362][ T3429] hsr_slave_1: left promiscuous mode [ 539.766512][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.802384][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.849044][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.891522][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.110984][ T3429] veth1_macvtap: left promiscuous mode [ 540.117069][ T3429] veth0_macvtap: left promiscuous mode [ 540.141192][ T3429] veth1_vlan: left promiscuous mode [ 540.163706][ T3429] veth0_vlan: left promiscuous mode [ 542.992659][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 543.128977][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 543.403194][ T7940] loop5: detected capacity change from 0 to 512 [ 543.687527][ T7940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.801419][ T7940] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.992156][ T7940] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.442: corrupted inode contents [ 544.079498][ T7940] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.442: mark_inode_dirty error [ 544.124349][ T7940] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.442: corrupted inode contents [ 544.196166][ T7940] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.442: mark_inode_dirty error [ 544.977655][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.010916][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.041377][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.069689][ T7796] bridge_slave_0: entered allmulticast mode [ 545.086621][ T7796] bridge_slave_0: entered promiscuous mode [ 545.265578][ T7961] netlink: 112 bytes leftover after parsing attributes in process `syz.0.446'. [ 545.309919][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 545.321549][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.354507][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.359101][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 545.397114][ T7796] bridge_slave_1: entered allmulticast mode [ 545.450415][ T7796] bridge_slave_1: entered promiscuous mode [ 545.699022][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.722856][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.766331][ T7802] bridge_slave_0: entered allmulticast mode [ 545.814823][ T7802] bridge_slave_0: entered promiscuous mode [ 546.071840][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.137934][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.146008][ T7802] bridge_slave_1: entered allmulticast mode [ 546.194162][ T7802] bridge_slave_1: entered promiscuous mode [ 546.292086][ T7796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.344652][ T7796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.061345][ T7802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.406196][ T3429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.089079][ T7802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.248655][ T7796] team0: Port device team_slave_0 added [ 548.476019][ T7982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.483840][ T7982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 548.490977][ T7982] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 548.497838][ T7982] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 548.504237][ T7982] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 548.585909][ T7982] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 548.591798][ T3429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.628056][ T7982] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 548.634711][ T7982] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 548.678537][ T7982] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 548.919445][ T7796] team0: Port device team_slave_1 added [ 549.232518][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 549.407110][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 549.602931][ T3429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.781294][ T7802] team0: Port device team_slave_0 added [ 549.807399][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 549.824408][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.849570][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.939274][ T7796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.121346][ T3429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.327923][ T7802] team0: Port device team_slave_1 added [ 550.392034][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.412623][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.486133][ T7796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.527242][ T5776] Bluetooth: hci5: command 0x0c1a tx timeout [ 550.534183][ T5776] Bluetooth: hci4: command 0x0c1a tx timeout [ 550.545475][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 550.689524][ T5782] Bluetooth: hci6: command 0x0c1a tx timeout [ 552.459485][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.501302][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.581162][ T7802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.605829][ T5782] Bluetooth: hci4: command 0x0c1a tx timeout [ 552.776307][ T5782] Bluetooth: hci6: command 0x0c1a tx timeout [ 553.083375][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.133506][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.272268][ T7802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.011737][ T7796] hsr_slave_0: entered promiscuous mode [ 554.069120][ T7796] hsr_slave_1: entered promiscuous mode [ 554.687672][ T5782] Bluetooth: hci4: command 0x0c1a tx timeout [ 554.844190][ T5782] Bluetooth: hci6: command 0x0c1a tx timeout [ 555.042280][ T3429] bridge_slave_1: left allmulticast mode [ 555.059150][ T3429] bridge_slave_1: left promiscuous mode [ 555.072640][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 555.083525][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.147933][ T3429] bridge_slave_0: left allmulticast mode [ 555.169779][ T3429] bridge_slave_0: left promiscuous mode [ 555.178733][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.225432][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 556.421143][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.429702][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.442198][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.463610][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.478700][ T5828] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.490928][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.495592][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.516537][ T3429] bond0 (unregistering): Released all slaves [ 556.574440][ T5828] usb 1-1: config 0 descriptor?? [ 556.705407][ T7802] hsr_slave_0: entered promiscuous mode [ 556.750156][ T7802] hsr_slave_1: entered promiscuous mode [ 556.777904][ T7802] debugfs: 'hsr0' already exists in 'hsr' [ 556.788240][ T7802] Cannot create hsr debugfs directory [ 556.878485][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 557.010047][ T3429] hsr_slave_0: left promiscuous mode [ 557.035660][ T3429] hsr_slave_1: left promiscuous mode [ 557.057307][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.089341][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.119571][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.153450][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.262455][ T3429] veth1_macvtap: left promiscuous mode [ 557.287814][ T3429] veth0_macvtap: left promiscuous mode [ 557.295796][ T5828] usbhid 1-1:0.0: can't add hid device: -71 [ 557.323824][ T5828] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 557.333264][ T3429] veth1_vlan: left promiscuous mode [ 557.341417][ T3429] veth0_vlan: left promiscuous mode [ 557.375257][ T5828] usb 1-1: USB disconnect, device number 6 [ 561.670721][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 561.823464][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 564.271646][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 564.515511][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 565.369445][ T8061] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 565.595360][ T8061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.658636][ T8061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.697841][ T8061] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.763237][ T8061] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.797143][ T8061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.910200][ T8061] usb 2-1: config 0 descriptor?? [ 566.739899][ T8061] usbhid 2-1:0.0: can't add hid device: -71 [ 566.784570][ T8061] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 566.858145][ T8061] usb 2-1: USB disconnect, device number 9 [ 569.331991][ T7796] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.539281][ T7796] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.625135][ T7796] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.805426][ T7796] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 570.198571][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.487'. [ 570.477913][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.487'. [ 571.112145][ T29] audit: type=1326 audit(1772699760.890:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.0.489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64b79c799 code=0x0 [ 571.853853][ T7802] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 571.967604][ T7802] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 572.148232][ T7802] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 572.271583][ T7802] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 572.390688][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 572.685840][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.706603][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.746107][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.763247][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.820465][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.845547][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.878026][ T10] usb 6-1: config 0 descriptor?? [ 573.650890][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 573.744173][ T7796] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.760176][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 573.882927][ T10] usb 6-1: USB disconnect, device number 6 [ 574.437262][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.447145][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.783359][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.791248][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.831724][ T8140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.839578][ T8140] IPv6: NLM_F_CREATE should be set when creating new route [ 577.327951][ T7802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.740964][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.748355][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.754793][ T7802] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.889550][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.897452][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.128326][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.136136][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.531273][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.812533][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 580.011955][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.091540][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.131849][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.188842][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.244750][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.314006][ T9] usb 1-1: config 0 descriptor?? [ 580.976328][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 581.145413][ T9] usb 1-1: USB disconnect, device number 7 [ 581.552479][ T7802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.615819][ T8176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.624186][ T8176] IPv6: NLM_F_CREATE should be set when creating new route [ 582.363883][ T8173] fido_id[8173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 583.576852][ T7796] veth0_vlan: entered promiscuous mode [ 583.787722][ T7796] veth1_vlan: entered promiscuous mode [ 584.341736][ T7796] veth0_macvtap: entered promiscuous mode [ 584.490378][ T7796] veth1_macvtap: entered promiscuous mode [ 584.762645][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.924658][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.097460][ T8202] loop1: detected capacity change from 0 to 1024 [ 585.099066][ T3445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.150793][ T3445] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.258945][ T3445] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.271464][ T8202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.300578][ T3445] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.748088][ T8212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 586.064244][ T7802] veth0_vlan: entered promiscuous mode [ 586.080650][ T5827] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 586.159176][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.266630][ T7802] veth1_vlan: entered promiscuous mode [ 586.333352][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.395811][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.462522][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.538744][ T5827] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.578291][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.667337][ T5827] usb 1-1: config 0 descriptor?? [ 587.190171][ T7802] veth0_macvtap: entered promiscuous mode [ 587.354495][ T5827] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 587.491078][ T7802] veth1_macvtap: entered promiscuous mode [ 587.573619][ T5827] usb 1-1: USB disconnect, device number 8 [ 588.006847][ T7802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.256185][ T7802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.608684][ T8225] fido_id[8225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 588.661050][ T6212] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.722352][ T8050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.836587][ T8050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.876385][ T8050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.967482][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.520'. [ 589.573386][ T8230] bridge1: port 1(veth3) entered blocking state [ 589.658863][ T8230] bridge1: port 1(veth3) entered disabled state [ 589.665965][ T8230] veth3: entered allmulticast mode [ 589.740771][ T8230] veth3: entered promiscuous mode [ 590.017239][ T8232] bridge1: port 2(veth0_to_bond) entered blocking state [ 590.024774][ T8232] bridge1: port 2(veth0_to_bond) entered disabled state [ 590.117152][ T8232] veth0_to_bond: entered allmulticast mode [ 590.132392][ T8232] veth0_to_bond: entered promiscuous mode [ 590.670378][ T8234] bridge1: port 3(veth5) entered blocking state [ 590.735056][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.754720][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.764765][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.772403][ T8234] bridge1: port 3(veth5) entered disabled state [ 590.789254][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.830550][ T8234] veth5: entered allmulticast mode [ 590.848075][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.902974][ T8234] veth5: entered promiscuous mode [ 591.519780][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 591.561985][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.574273][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 591.608247][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 591.646840][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.905547][ T5782] Bluetooth: hci0: command tx timeout [ 593.152875][ T8264] loop1: detected capacity change from 0 to 1024 [ 593.218496][ T8264] EXT4-fs: inline encryption not supported [ 593.301142][ T8264] EXT4-fs: Ignoring removed nobh option [ 593.346701][ T8264] EXT4-fs: Ignoring removed nobh option [ 593.369582][ T8264] EXT4-fs: Ignoring removed bh option [ 593.513519][ T8264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.551758][ T8264] capability: warning: `syz.1.526' uses 32-bit capabilities (legacy support in use) [ 593.575859][ T8267] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.527'. [ 593.707990][ T5782] Bluetooth: hci2: command tx timeout [ 593.826144][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.022324][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.480849][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.534636][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 594.753048][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.781202][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.795979][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.865047][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.896841][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.923009][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.955651][ T9] usb 6-1: config 0 descriptor?? [ 594.987246][ T5782] Bluetooth: hci0: command tx timeout [ 595.419544][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.495422][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 595.640895][ T9] usb 6-1: USB disconnect, device number 7 [ 595.783791][ T5782] Bluetooth: hci2: command tx timeout [ 595.970322][ T8290] fido_id[8290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 596.743819][ T8245] chnl_net:caif_netlink_parms(): no params data found [ 597.063493][ T5782] Bluetooth: hci0: command tx timeout [ 597.872621][ T5782] Bluetooth: hci2: command tx timeout [ 597.956632][ T34] bridge_slave_1: left allmulticast mode [ 597.966297][ T34] bridge_slave_1: left promiscuous mode [ 598.020382][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.102594][ T34] bridge_slave_0: left allmulticast mode [ 598.122926][ T34] bridge_slave_0: left promiscuous mode [ 598.140528][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.142085][ T5782] Bluetooth: hci0: command tx timeout [ 599.941670][ T5782] Bluetooth: hci2: command tx timeout [ 600.064360][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 600.149600][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.253318][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.270757][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.300834][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.306777][ T34] bond0 (unregistering): Released all slaves [ 600.312559][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.360679][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.381501][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.440420][ T10] usb 2-1: config 0 descriptor?? [ 600.671757][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 600.932762][ T34] hsr_slave_0: left promiscuous mode [ 600.984716][ T34] hsr_slave_1: left promiscuous mode [ 601.038217][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.071055][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.079929][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 601.162077][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.200925][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.281442][ T34] veth1_macvtap: left promiscuous mode [ 601.287262][ T34] veth0_macvtap: left promiscuous mode [ 601.321389][ T34] veth1_vlan: left promiscuous mode [ 601.327232][ T34] veth0_vlan: left promiscuous mode [ 602.994872][ T5827] usb 2-1: USB disconnect, device number 10 [ 603.776247][ T34] team0 (unregistering): Port device team_slave_1 removed [ 603.945813][ T34] team0 (unregistering): Port device team_slave_0 removed [ 605.594538][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.629287][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.636950][ T8245] bridge_slave_0: entered allmulticast mode [ 605.675891][ T8245] bridge_slave_0: entered promiscuous mode [ 605.736131][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.790770][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.814893][ T8245] bridge_slave_1: entered allmulticast mode [ 605.904899][ T8245] bridge_slave_1: entered promiscuous mode [ 606.488925][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.596455][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.905407][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.514871][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.663529][ T8245] team0: Port device team_slave_0 added [ 607.765324][ T8245] team0: Port device team_slave_1 added [ 607.808872][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.816677][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.884843][ T8249] bridge_slave_0: entered allmulticast mode [ 607.915944][ T8249] bridge_slave_0: entered promiscuous mode [ 608.052694][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.389690][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.399453][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.444912][ T8249] bridge_slave_1: entered allmulticast mode [ 608.466416][ T8249] bridge_slave_1: entered promiscuous mode [ 608.542774][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.587284][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 608.640595][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.685856][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.722744][ T8245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.753998][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.762318][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.793351][ T8245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.833703][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.877415][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.897180][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 608.933684][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 608.950626][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.980423][ T10] usb 2-1: config 0 descriptor?? [ 609.406837][ T5827] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 609.417086][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.565344][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.573811][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 609.609151][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 609.666791][ T5827] usb 6-1: config 0 has no interfaces? [ 609.672669][ T5827] usb 6-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 609.716637][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.798610][ T5827] usb 6-1: config 0 descriptor?? [ 610.073679][ T9] usb 6-1: USB disconnect, device number 8 [ 610.445795][ T8245] hsr_slave_0: entered promiscuous mode [ 610.510408][ T8245] hsr_slave_1: entered promiscuous mode [ 610.737204][ T8249] team0: Port device team_slave_0 added [ 610.924178][ T8249] team0: Port device team_slave_1 added [ 611.560641][ T9] usb 2-1: USB disconnect, device number 11 [ 611.716728][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.723898][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.847159][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.166061][ T34] bridge_slave_1: left allmulticast mode [ 612.191544][ T34] bridge_slave_1: left promiscuous mode [ 612.239594][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.283417][ T34] bridge_slave_0: left allmulticast mode [ 612.293661][ T34] bridge_slave_0: left promiscuous mode [ 612.326650][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.372621][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.410918][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.451617][ T34] bond0 (unregistering): Released all slaves [ 613.494375][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.511942][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.561262][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.974775][ T5827] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 614.014606][ T34] hsr_slave_0: left promiscuous mode [ 614.071134][ T34] hsr_slave_1: left promiscuous mode [ 614.091607][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.134932][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.154878][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.162967][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.164521][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 614.222750][ T5827] usb 2-1: config 0 has no interfaces? [ 614.234368][ T5827] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 614.251634][ T34] veth1_macvtap: left promiscuous mode [ 614.255737][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.264712][ T34] veth0_macvtap: left promiscuous mode [ 614.272338][ T34] veth1_vlan: left promiscuous mode [ 614.293055][ T5827] usb 2-1: config 0 descriptor?? [ 614.299699][ T34] veth0_vlan: left promiscuous mode [ 614.505013][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 614.711809][ T10] usb 2-1: USB disconnect, device number 12 [ 614.753162][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.805848][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.822896][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.850901][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.866343][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.898371][ T9] usb 6-1: config 0 descriptor?? [ 615.449154][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 616.209264][ T34] team0 (unregistering): Port device team_slave_1 removed [ 616.386148][ T34] team0 (unregistering): Port device team_slave_0 removed [ 617.476136][ T10] usb 6-1: USB disconnect, device number 9 [ 617.905811][ T8249] hsr_slave_0: entered promiscuous mode [ 617.962794][ T8448] loop5: detected capacity change from 0 to 128 [ 617.981973][ T8249] hsr_slave_1: entered promiscuous mode [ 618.019615][ T8249] debugfs: 'hsr0' already exists in 'hsr' [ 618.059874][ T8249] Cannot create hsr debugfs directory [ 620.671491][ T6518] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 620.911128][ T6518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.955606][ T6518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.968030][ T6518] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 621.002934][ T8245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 621.009965][ T6518] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 621.031237][ T6518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.084002][ T6518] usb 1-1: config 0 descriptor?? [ 621.187252][ T8245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 621.532933][ T8245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 621.674000][ T6518] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 621.704569][ T8245] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.570307][ T5827] usb 1-1: USB disconnect, device number 9 [ 623.713482][ T8249] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 623.996615][ T8249] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 624.195832][ T8249] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 624.344760][ T8249] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 624.938454][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.332417][ T8245] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.526603][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.534605][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.780481][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.788149][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.955062][ T8532] loop5: detected capacity change from 0 to 1024 [ 627.070061][ T795] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 627.113213][ T8532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 627.148838][ T8532] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.255614][ T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.278319][ T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.310204][ T795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.399190][ T795] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.406018][ T8532] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.598: lblock 3 mapped to illegal pblock 3 (length 3) [ 627.435886][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.490906][ T795] usb 1-1: config 0 descriptor?? [ 627.504554][ T8532] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 627.522451][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.561261][ T8538] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 627.598136][ T8532] EXT4-fs (loop5): This should not happen!! Data will be lost [ 627.598136][ T8532] [ 627.720715][ T8540] EXT4-fs error (device loop5): ext4_ext_remove_space:2954: inode #15: comm syz.5.598: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 627.830970][ T8540] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 117 [ 627.889245][ T8540] EXT4-fs (loop5): This should not happen!! Data will be lost [ 627.889245][ T8540] [ 628.049444][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.146660][ T795] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 628.235563][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.243310][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.528969][ T3420] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 628.557106][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.564692][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.625601][ T3420] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 628.697158][ T3420] EXT4-fs (loop5): This should not happen!! Data will be lost [ 628.697158][ T3420] [ 628.819649][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 630.177564][ T5825] usb 1-1: USB disconnect, device number 10 [ 630.194246][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.023001][ T8578] loop1: detected capacity change from 0 to 736 [ 632.103640][ T8578] iso9660: Unknown parameter 'no[ock' [ 632.554326][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.734826][ T5825] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 633.987373][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.045694][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.077764][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 634.165749][ T5825] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 634.215684][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.313082][ T5825] usb 6-1: config 0 descriptor?? [ 634.468086][ T8245] veth0_vlan: entered promiscuous mode [ 634.762574][ T8245] veth1_vlan: entered promiscuous mode [ 634.991314][ T5825] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 635.549538][ T8245] veth0_macvtap: entered promiscuous mode [ 635.814624][ T8245] veth1_macvtap: entered promiscuous mode [ 636.189581][ T5825] usb 6-1: USB disconnect, device number 10 [ 636.470356][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.736481][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.089187][ T8623] loop1: detected capacity change from 0 to 736 [ 637.102953][ T3429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.157967][ T8623] iso9660: Unknown parameter 'no[ock' [ 637.281656][ T8050] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.363163][ T6212] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.395294][ T8623] netlink: 84 bytes leftover after parsing attributes in process `syz.1.620'. [ 637.547029][ T6212] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.644971][ T8249] veth0_vlan: entered promiscuous mode [ 637.899163][ T8249] veth1_vlan: entered promiscuous mode [ 638.520427][ T8249] veth0_macvtap: entered promiscuous mode [ 638.710569][ T8249] veth1_macvtap: entered promiscuous mode [ 639.147285][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.155553][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.168802][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.467094][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.652069][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.733693][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.780047][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.802186][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.941030][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 641.170954][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.247545][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.299897][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 641.409238][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 641.433626][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.500349][ T9] usb 1-1: config 0 descriptor?? [ 641.633287][ T8669] loop1: detected capacity change from 0 to 736 [ 641.705311][ T8669] iso9660: Unknown parameter 'no[ock' [ 641.904162][ T8669] netlink: 84 bytes leftover after parsing attributes in process `syz.1.631'. [ 642.151266][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 644.090645][ T5827] usb 1-1: USB disconnect, device number 11 [ 645.893413][ T8703] syzkaller0: entered promiscuous mode [ 645.925597][ T8703] syzkaller0: entered allmulticast mode [ 646.031795][ T8703] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 646.478543][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 646.680799][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 646.704799][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.705480][ T8709] loop1: detected capacity change from 0 to 2048 [ 646.746637][ T9] usb 6-1: config 0 has no interfaces? [ 646.788787][ T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 646.828009][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.880199][ T9] usb 6-1: Product: syz [ 646.884710][ T9] usb 6-1: Manufacturer: syz [ 646.936455][ T9] usb 6-1: SerialNumber: syz [ 646.977295][ T8709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.041479][ T9] usb 6-1: config 0 descriptor?? [ 647.363169][ T9] usb 6-1: USB disconnect, device number 11 [ 647.633512][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.212456][ T436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.264306][ T436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.394868][ T8724] loop1: detected capacity change from 0 to 736 [ 648.483138][ T8724] iso9660: Unknown parameter 'no[ock' [ 648.706579][ T8724] netlink: 84 bytes leftover after parsing attributes in process `syz.1.640'. [ 648.834862][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.905822][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.238839][ T8747] netlink: 'syz.0.645': attribute type 27 has an invalid length. [ 651.310767][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 651.373062][ T8747] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 651.676101][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 651.688411][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 651.700811][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 651.726725][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 651.738919][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 652.920059][ T5776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 652.945521][ T5776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 652.964634][ T5776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 653.026532][ T5776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 653.052775][ T5776] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 653.844058][ T5776] Bluetooth: hci4: command tx timeout [ 654.637216][ T3445] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.128480][ T5776] Bluetooth: hci6: command tx timeout [ 655.136600][ T3445] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.403295][ T8779] loop5: detected capacity change from 0 to 512 [ 655.455469][ T8779] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 655.598124][ T8779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 655.742150][ T8779] EXT4-fs (loop5): 1 truncate cleaned up [ 655.779336][ T8779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.888774][ T3445] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.945388][ T5776] Bluetooth: hci4: command tx timeout [ 656.359747][ T3445] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.573842][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 656.993347][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 657.153172][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 657.181559][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 657.193131][ T5776] Bluetooth: hci6: command tx timeout [ 657.219195][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.293776][ T9] usb 1-1: config 0 has no interface number 0 [ 657.300190][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.340690][ T8784] mmap: syz.5.653 (8784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 657.355176][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 657.375503][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.404001][ T9] usb 1-1: config 0 descriptor?? [ 657.460934][ T9] ldusb 1-1:0.55: Interrupt in endpoint not found [ 657.656204][ T795] usb 1-1: USB disconnect, device number 12 [ 657.942532][ T3445] bridge_slave_1: left allmulticast mode [ 657.972724][ T3445] bridge_slave_1: left promiscuous mode [ 657.990024][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.002875][ T5776] Bluetooth: hci4: command tx timeout [ 658.171887][ T3445] bridge_slave_0: left allmulticast mode [ 658.178098][ T3445] bridge_slave_0: left promiscuous mode [ 658.243289][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.843701][ T8805] syz.0.660 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 659.283831][ T5776] Bluetooth: hci6: command tx timeout [ 659.766359][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.874466][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.943875][ T3445] bond0 (unregistering): Released all slaves [ 660.072111][ T5776] Bluetooth: hci4: command tx timeout [ 661.287986][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.351355][ T5776] Bluetooth: hci6: command tx timeout [ 661.516276][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.551792][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.559691][ T8754] bridge_slave_0: entered allmulticast mode [ 661.639229][ T8754] bridge_slave_0: entered promiscuous mode [ 661.774927][ T3445] hsr_slave_0: left promiscuous mode [ 661.830969][ T3445] hsr_slave_1: left promiscuous mode [ 661.883859][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.905402][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.930934][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.985262][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.075811][ T3445] veth1_macvtap: left promiscuous mode [ 662.088847][ T3445] veth0_macvtap: left promiscuous mode [ 662.098937][ T3445] veth1_vlan: left promiscuous mode [ 662.111186][ T3445] veth0_vlan: left promiscuous mode [ 662.157363][ T5827] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 662.472939][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 662.519661][ T5827] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 662.532684][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.570290][ T5827] usb 2-1: config 0 has no interface number 0 [ 662.598202][ T5827] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.619295][ T5827] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 662.670299][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.694858][ T5827] usb 2-1: config 0 descriptor?? [ 662.736718][ T5827] ldusb 2-1:0.55: Interrupt in endpoint not found [ 662.983992][ T5825] usb 2-1: USB disconnect, device number 13 [ 664.225844][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 664.282613][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 665.125526][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.176220][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.224023][ T8754] bridge_slave_1: entered allmulticast mode [ 665.260180][ T8754] bridge_slave_1: entered promiscuous mode [ 665.554843][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 666.045984][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.286162][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.864722][ T8754] team0: Port device team_slave_0 added [ 666.962271][ T8754] team0: Port device team_slave_1 added [ 667.398475][ T8050] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.628317][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.635486][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.732431][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.833614][ T8050] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.934389][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.968632][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.107517][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.250497][ T8050] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.297996][ T795] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 668.497270][ T795] usb 6-1: Using ep0 maxpacket: 8 [ 668.518642][ T8050] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.554776][ T795] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 668.576381][ T795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.609321][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.627521][ T795] usb 6-1: config 0 has no interface number 0 [ 668.641749][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.655205][ T795] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 668.658944][ T8761] bridge_slave_0: entered allmulticast mode [ 668.707729][ T795] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 668.716058][ T8761] bridge_slave_0: entered promiscuous mode [ 668.746955][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.783356][ T795] usb 6-1: config 0 descriptor?? [ 668.857089][ T795] ldusb 6-1:0.55: Interrupt in endpoint not found [ 668.885288][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.928215][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.968786][ T8761] bridge_slave_1: entered allmulticast mode [ 668.992376][ T8761] bridge_slave_1: entered promiscuous mode [ 669.058281][ T5827] usb 6-1: USB disconnect, device number 12 [ 669.224138][ T8754] hsr_slave_0: entered promiscuous mode [ 669.268317][ T8754] hsr_slave_1: entered promiscuous mode [ 669.641639][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.917463][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.362940][ T8761] team0: Port device team_slave_0 added [ 670.751887][ T8761] team0: Port device team_slave_1 added [ 671.462414][ T8050] bridge_slave_1: left allmulticast mode [ 671.477687][ T8050] bridge_slave_1: left promiscuous mode [ 671.495218][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.590830][ T8050] bridge_slave_0: left allmulticast mode [ 671.598053][ T8050] bridge_slave_0: left promiscuous mode [ 671.604915][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.934253][ T8050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.019225][ T8050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.087694][ T8050] bond0 (unregistering): Released all slaves [ 673.131838][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.174845][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.313614][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.377617][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.425036][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.515113][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.614948][ T5825] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 673.807431][ T8877] syzkaller0: entered promiscuous mode [ 673.817730][ T8877] syzkaller0: entered allmulticast mode [ 673.824768][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 673.837318][ T5825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.870115][ T5825] usb 2-1: config 0 has no interfaces? [ 673.932189][ T5825] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 673.962838][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.983379][ T5825] usb 2-1: Product: syz [ 673.993667][ T5825] usb 2-1: Manufacturer: syz [ 674.003989][ T5825] usb 2-1: SerialNumber: syz [ 674.021602][ T5825] usb 2-1: config 0 descriptor?? [ 674.196117][ T8050] hsr_slave_0: left promiscuous mode [ 674.211899][ T8050] hsr_slave_1: left promiscuous mode [ 674.231036][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.248831][ T8050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.270567][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.278477][ T8050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.312741][ T8050] veth1_macvtap: left promiscuous mode [ 674.329690][ T8050] veth0_macvtap: left promiscuous mode [ 674.336100][ T8050] veth1_vlan: left promiscuous mode [ 674.342390][ T8050] veth0_vlan: left promiscuous mode [ 675.864152][ T8050] team0 (unregistering): Port device team_slave_1 removed [ 675.915966][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.931971][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.942108][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.948295][ T8050] team0 (unregistering): Port device team_slave_0 removed [ 675.956738][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.964209][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.926997][ T8761] hsr_slave_0: entered promiscuous mode [ 676.938552][ T8761] hsr_slave_1: entered promiscuous mode [ 676.959104][ T8761] debugfs: 'hsr0' already exists in 'hsr' [ 676.973821][ T8761] Cannot create hsr debugfs directory [ 677.004033][ T5825] usb 2-1: USB disconnect, device number 14 [ 678.072423][ T5782] Bluetooth: hci0: command tx timeout [ 679.503123][ T8754] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 679.712534][ T8754] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 680.096722][ T8754] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 680.143939][ T5782] Bluetooth: hci0: command tx timeout [ 680.201460][ T5827] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 680.351885][ T8754] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 680.411245][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 680.451351][ T5827] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 680.459903][ T5827] usb 6-1: config 0 has no interface number 0 [ 680.525964][ T5827] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 680.561828][ T5827] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 680.630163][ T5827] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.715537][ T5827] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 680.760410][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.826509][ T5827] usb 6-1: config 0 descriptor?? [ 680.859674][ T8888] chnl_net:caif_netlink_parms(): no params data found [ 680.921779][ T5827] ldusb 6-1:0.55: Interrupt in endpoint not found [ 681.138354][ T5827] usb 6-1: USB disconnect, device number 13 [ 682.135807][ T8761] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 682.220819][ T5782] Bluetooth: hci0: command tx timeout [ 682.337002][ T8761] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 682.417055][ T8761] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 682.641370][ T8761] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 683.571766][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.582852][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.591376][ T8918] loop5: detected capacity change from 0 to 2048 [ 683.603654][ T8888] bridge_slave_0: entered allmulticast mode [ 683.618155][ T8888] bridge_slave_0: entered promiscuous mode [ 683.674849][ T8918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.692807][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.701460][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.711878][ T8888] bridge_slave_1: entered allmulticast mode [ 683.726551][ T8888] bridge_slave_1: entered promiscuous mode [ 683.895559][ T436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.911916][ T436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 684.014831][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.113349][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.166435][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.183182][ T436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.200040][ T436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 684.298537][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.308697][ T5782] Bluetooth: hci0: command tx timeout [ 684.535968][ T436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.589361][ T436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 684.807576][ T436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.820321][ T436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 684.880700][ T8888] team0: Port device team_slave_0 added [ 684.942018][ T8925] syzkaller0: entered promiscuous mode [ 684.947722][ T8925] syzkaller0: entered allmulticast mode [ 685.027581][ T8888] team0: Port device team_slave_1 added [ 685.129106][ T8929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 685.248790][ T5825] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 685.324040][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.332340][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.369304][ T8888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.449553][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 685.465297][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.515070][ T5825] usb 6-1: config 0 has no interfaces? [ 685.552483][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.572449][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.598551][ T5825] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 685.608157][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.617943][ T5825] usb 6-1: Product: syz [ 685.622742][ T5825] usb 6-1: Manufacturer: syz [ 685.628276][ T5825] usb 6-1: SerialNumber: syz [ 685.630737][ T8888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.661478][ T5825] usb 6-1: config 0 descriptor?? [ 685.758690][ T5827] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 685.825588][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.918657][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 685.937908][ T5827] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 685.950268][ T5827] usb 2-1: config 0 has no interface number 0 [ 685.956904][ T5827] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 685.987213][ T5827] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 686.006473][ T5827] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 686.021785][ T5827] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 686.033172][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.053715][ T5827] usb 2-1: config 0 descriptor?? [ 686.107531][ T8061] usb 6-1: USB disconnect, device number 14 [ 686.124042][ T5827] ldusb 2-1:0.55: Interrupt in endpoint not found [ 686.124976][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.138667][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.275120][ T8888] hsr_slave_0: entered promiscuous mode [ 686.289680][ T8888] hsr_slave_1: entered promiscuous mode [ 686.307812][ T8888] debugfs: 'hsr0' already exists in 'hsr' [ 686.315168][ T8888] Cannot create hsr debugfs directory [ 686.330368][ T5827] usb 2-1: USB disconnect, device number 15 [ 686.507968][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.515769][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.685419][ T436] bridge_slave_1: left allmulticast mode [ 686.695486][ T436] bridge_slave_1: left promiscuous mode [ 686.724024][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.747527][ T436] bridge_slave_0: left allmulticast mode [ 686.764577][ T436] bridge_slave_0: left promiscuous mode [ 686.772034][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.793780][ T436] veth5: left allmulticast mode [ 686.799203][ T436] veth5: left promiscuous mode [ 686.806226][ T436] bridge1: port 2(veth5) entered disabled state [ 686.827321][ T436] veth3: left allmulticast mode [ 686.834035][ T436] veth3: left promiscuous mode [ 686.860218][ T436] bridge1: port 1(veth3) entered disabled state [ 686.909586][ T436] veth7: left allmulticast mode [ 686.923403][ T436] veth7: left promiscuous mode [ 686.930750][ T436] bridge2: port 1(veth7) entered disabled state [ 687.208404][ T8940] loop5: detected capacity change from 0 to 736 [ 687.234157][ T8940] iso9660: Unknown parameter 'no[ock' [ 687.312473][ T8940] netlink: 48 bytes leftover after parsing attributes in process `syz.5.698'. [ 688.426305][ T436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.512829][ T436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.535665][ T436] bond0 (unregistering): Released all slaves [ 688.572575][ T436] bond1 (unregistering): Released all slaves [ 688.862045][ T8940] geneve3: entered promiscuous mode [ 688.868041][ T8940] geneve3: entered allmulticast mode [ 689.622269][ T8947] loop5: detected capacity change from 0 to 2048 [ 689.799681][ T8947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.190270][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.209348][ T436] hsr_slave_0: left promiscuous mode [ 690.220702][ T436] hsr_slave_1: left promiscuous mode [ 690.235086][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.247105][ T436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.260622][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.269415][ T436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.539802][ T436] veth1_macvtap: left promiscuous mode [ 690.571694][ T436] veth0_macvtap: left promiscuous mode [ 690.589555][ T436] veth1_vlan: left promiscuous mode [ 690.631877][ T436] veth0_vlan: left promiscuous mode [ 690.921592][ T8958] loop5: detected capacity change from 0 to 512 [ 691.100961][ T8958] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.702: couldn't read orphan inode 26 (err -116) [ 691.157199][ T8958] loop5: lost filesystem error report for type 5 error -116 [ 691.165758][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 691.180015][ C1] EXT4-fs (loop5): initial error at time 1772699881: ext4_orphan_get:1396 [ 691.188929][ C1] EXT4-fs (loop5): last error at time 1772699881: ext4_orphan_get:1396 [ 691.232969][ T8958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.256681][ T8958] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.523539][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.176095][ T5843] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 692.293920][ T436] team0 (unregistering): Port device team_slave_1 removed [ 692.354603][ T436] team0 (unregistering): Port device team_slave_0 removed [ 692.383533][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 692.428564][ T5843] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 692.447996][ T5843] usb 6-1: config 0 has no interface number 0 [ 692.455624][ T5843] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 692.471147][ T5843] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 692.483552][ T5843] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 692.503651][ T5843] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 692.514402][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.559428][ T5843] usb 6-1: config 0 descriptor?? [ 692.609062][ T5843] ldusb 6-1:0.55: Interrupt in endpoint not found [ 692.806945][ T5843] usb 6-1: USB disconnect, device number 15 [ 693.825438][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.926334][ T8973] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 694.104303][ T8975] syzkaller0: entered promiscuous mode [ 694.110035][ T8975] syzkaller0: entered allmulticast mode [ 694.114527][ T5827] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 694.277623][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.707'. [ 694.332820][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 694.362926][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.400531][ T5827] usb 6-1: config 0 has no interfaces? [ 694.463504][ T5827] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 694.483520][ T8981] geneve2: entered promiscuous mode [ 694.504418][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.512737][ T5827] usb 6-1: Product: syz [ 694.534341][ T5827] usb 6-1: Manufacturer: syz [ 694.539329][ T5827] usb 6-1: SerialNumber: syz [ 694.558085][ T8981] geneve2: entered allmulticast mode [ 694.592092][ T5827] usb 6-1: config 0 descriptor?? [ 694.961310][ T8888] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 695.151524][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.161294][ T9] usb 6-1: USB disconnect, device number 16 [ 695.240234][ T8888] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 695.360364][ T8888] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 695.560304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.568084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.638990][ T8888] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 695.847860][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.855731][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.115098][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.677210][ T8888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.328991][ T8888] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.579422][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.586927][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.826933][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.834784][ T8050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.162373][ T795] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 700.371456][ T795] usb 2-1: Using ep0 maxpacket: 8 [ 700.428705][ T795] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 700.461188][ T795] usb 2-1: config 0 has no interface number 0 [ 700.467564][ T795] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 700.558456][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.565524][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.614402][ T795] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 700.643686][ T795] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 700.659202][ T795] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 700.702071][ T795] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 700.751295][ T795] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 700.817553][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.878572][ T795] usb 2-1: config 0 descriptor?? [ 700.906126][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.999546][ T795] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 701.184879][ T9024] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 701.288553][ T795] usb 2-1: USB disconnect, device number 16 [ 701.442993][ T795] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 702.311598][ T8754] veth0_vlan: entered promiscuous mode [ 702.616778][ T8754] veth1_vlan: entered promiscuous mode [ 703.377972][ T8754] veth0_macvtap: entered promiscuous mode [ 703.612138][ T8754] veth1_macvtap: entered promiscuous mode [ 704.156830][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.306286][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.679292][ T8050] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.726786][ T8050] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.892365][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.942269][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.984495][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.350106][ T8761] veth0_vlan: entered promiscuous mode [ 706.577478][ T8761] veth1_vlan: entered promiscuous mode [ 707.319840][ T8761] veth0_macvtap: entered promiscuous mode [ 707.634491][ T9075] syzkaller0: entered promiscuous mode [ 707.706109][ T9075] syzkaller0: entered allmulticast mode [ 707.836157][ T8761] veth1_macvtap: entered promiscuous mode [ 707.929901][ T9071] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 708.197665][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 708.328867][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.417243][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 708.434787][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.471818][ T9] usb 6-1: config 0 has no interfaces? [ 708.504270][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.551514][ T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 708.578777][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.597607][ T9] usb 6-1: Product: syz [ 708.602058][ T9] usb 6-1: Manufacturer: syz [ 708.650939][ T9] usb 6-1: SerialNumber: syz [ 708.685106][ T9] usb 6-1: config 0 descriptor?? [ 708.731637][ T700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.786353][ T700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.909892][ T700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.951019][ T700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.062625][ T5825] usb 6-1: USB disconnect, device number 17 [ 709.401832][ T8888] veth0_vlan: entered promiscuous mode [ 709.497170][ T5825] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 709.558208][ T8888] veth1_vlan: entered promiscuous mode [ 709.688127][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 709.721099][ T5825] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 709.782065][ T5825] usb 2-1: config 0 has no interface number 0 [ 709.809233][ T5825] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 709.856471][ T5825] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 709.906404][ T5825] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.982415][ T5825] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 710.002105][ T8888] veth0_macvtap: entered promiscuous mode [ 710.056555][ T5825] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.101527][ T5825] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 710.156565][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.180302][ T8888] veth1_macvtap: entered promiscuous mode [ 710.214839][ T5825] usb 2-1: config 0 descriptor?? [ 710.338769][ T5825] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 710.497684][ T795] usb 2-1: USB disconnect, device number 17 [ 710.548033][ T795] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 710.715540][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.925581][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.216216][ T3420] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.225785][ T6211] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.404867][ T6211] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.476246][ T6211] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.806517][ T9117] loop5: detected capacity change from 0 to 512 [ 712.930942][ T9117] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 713.076117][ T9117] EXT4-fs (loop5): 1 truncate cleaned up [ 713.084455][ T9117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.267452][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 713.277751][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 713.293567][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 713.320252][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 713.363883][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 713.987989][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.929718][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 714.968648][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 714.991259][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 715.014898][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 715.062246][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.507365][ T5782] Bluetooth: hci2: command tx timeout [ 717.166035][ T5782] Bluetooth: hci3: command tx timeout [ 717.562698][ T5782] Bluetooth: hci2: command tx timeout [ 717.961027][ T9163] 9p: Bad value for 'rfdno' [ 717.969056][ T700] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.158274][ T700] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.230533][ T9120] chnl_net:caif_netlink_parms(): no params data found [ 718.545631][ T700] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.938990][ T700] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.242825][ T5782] Bluetooth: hci3: command tx timeout [ 719.380985][ T9177] random: crng reseeded on system resumption [ 719.641871][ T5782] Bluetooth: hci2: command tx timeout [ 720.242130][ T700] bridge_slave_1: left allmulticast mode [ 720.248037][ T700] bridge_slave_1: left promiscuous mode [ 720.312413][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.422853][ T700] bridge_slave_0: left allmulticast mode [ 720.428823][ T700] bridge_slave_0: left promiscuous mode [ 720.486200][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.203576][ T9200] 9p: Bad value for 'rfdno' [ 721.321187][ T5782] Bluetooth: hci3: command tx timeout [ 721.720722][ T5782] Bluetooth: hci2: command tx timeout [ 722.152259][ T700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.257281][ T700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.328530][ T700] bond0 (unregistering): Released all slaves [ 722.879174][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 723.155193][ T700] hsr_slave_0: left promiscuous mode [ 723.185650][ T700] hsr_slave_1: left promiscuous mode [ 723.207635][ T700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.240956][ T700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.280563][ T700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.288266][ T700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.399892][ T5782] Bluetooth: hci3: command tx timeout [ 723.420668][ T700] veth1_macvtap: left promiscuous mode [ 723.426526][ T700] veth0_macvtap: left promiscuous mode [ 723.480080][ T700] veth1_vlan: left promiscuous mode [ 723.485708][ T700] veth0_vlan: left promiscuous mode [ 723.882649][ T9227] 9p: Bad value for 'rfdno' [ 725.600143][ T700] team0 (unregistering): Port device team_slave_1 removed [ 725.701999][ T700] team0 (unregistering): Port device team_slave_0 removed [ 726.325930][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.343222][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.385922][ T9120] bridge_slave_0: entered allmulticast mode [ 726.424946][ T9120] bridge_slave_0: entered promiscuous mode [ 726.774194][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.796497][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.838380][ T9120] bridge_slave_1: entered allmulticast mode [ 726.851787][ T9120] bridge_slave_1: entered promiscuous mode [ 727.404387][ T9120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.468861][ T9120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.481086][ T6212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.517612][ T6212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.823091][ T436] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.936824][ T9120] team0: Port device team_slave_0 added [ 728.016957][ T9120] team0: Port device team_slave_1 added [ 728.222389][ T436] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.795694][ T436] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.901138][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.923244][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.962692][ T9120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.127820][ T436] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.175689][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.192248][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.239342][ T9120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.306761][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.315252][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.320406][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.378050][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.432078][ T9136] bridge_slave_0: entered allmulticast mode [ 729.453132][ T9136] bridge_slave_0: entered promiscuous mode [ 729.525889][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.551405][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.567206][ T9136] bridge_slave_1: entered allmulticast mode [ 729.601178][ T9136] bridge_slave_1: entered promiscuous mode [ 730.192362][ T9288] loop5: detected capacity change from 0 to 512 [ 730.215189][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.270430][ T9288] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 730.452814][ T9288] EXT4-fs (loop5): 1 orphan inode deleted [ 730.491280][ T9288] EXT4-fs (loop5): 1 truncate cleaned up [ 730.569253][ T9288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.070425][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.214474][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.281713][ T9120] hsr_slave_0: entered promiscuous mode [ 731.321267][ T9120] hsr_slave_1: entered promiscuous mode [ 732.497116][ T9136] team0: Port device team_slave_0 added [ 732.542216][ T436] bridge_slave_1: left allmulticast mode [ 732.565189][ T436] bridge_slave_1: left promiscuous mode [ 732.586711][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.657024][ T436] bridge_slave_0: left allmulticast mode [ 732.707418][ T436] bridge_slave_0: left promiscuous mode [ 732.714307][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.798988][ T436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.848465][ T436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.866033][ T436] bond0 (unregistering): Released all slaves [ 734.092599][ T9136] team0: Port device team_slave_1 added [ 734.314742][ T436] hsr_slave_0: left promiscuous mode [ 734.331503][ T436] hsr_slave_1: left promiscuous mode [ 734.352859][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.371932][ T436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.418308][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.444305][ T436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.539986][ T436] veth1_macvtap: left promiscuous mode [ 734.560441][ T436] veth0_macvtap: left promiscuous mode [ 734.581149][ T436] veth1_vlan: left promiscuous mode [ 734.609720][ T436] veth0_vlan: left promiscuous mode [ 736.352051][ T436] team0 (unregistering): Port device team_slave_1 removed [ 736.403792][ T436] team0 (unregistering): Port device team_slave_0 removed [ 737.219117][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.243991][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.362864][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.409401][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.435091][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.480105][ T9353] loop8: detected capacity change from 0 to 256 [ 737.503026][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.555141][ T9353] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 737.603219][ T9353] FAT-fs (loop8): Filesystem has been set read-only [ 737.625175][ T9353] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 737.682147][ T9353] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 737.728747][ T29] audit: type=1800 audit(1772699927.593:21): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.793" name="file1" dev="loop8" ino=1048620 res=0 errno=0 [ 738.288866][ T9136] hsr_slave_0: entered promiscuous mode [ 738.311090][ T9136] hsr_slave_1: entered promiscuous mode [ 738.321143][ T9136] debugfs: 'hsr0' already exists in 'hsr' [ 738.340518][ T9136] Cannot create hsr debugfs directory [ 738.930213][ T9362] loop8: detected capacity change from 0 to 512 [ 739.041867][ T9362] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 739.143676][ T9362] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.796: corrupted in-inode xattr: invalid size in ea xattr [ 739.193104][ T9362] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 739.201699][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 739.218057][ C1] EXT4-fs (loop8): initial error at time 1772699929: ext4_iget_extra_inode:5025: inode 15 [ 739.228547][ C1] EXT4-fs (loop8): last error at time 1772699929: ext4_iget_extra_inode:5025: inode 15 [ 739.285680][ T9362] EXT4-fs (loop8): get orphan inode failed [ 739.323517][ T9362] EXT4-fs (loop8): mount failed [ 740.907387][ T9120] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 741.019762][ T9120] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 741.206192][ T9120] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 741.286702][ T9120] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 742.315732][ T9393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 742.601178][ T9136] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 742.775150][ T9136] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 742.827906][ T29] audit: type=1326 audit(1772699932.696:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.5.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f9c799 code=0x7ffc0000 [ 742.884759][ T9136] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 742.902544][ T29] audit: type=1326 audit(1772699932.776:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.5.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f9c799 code=0x7ffc0000 [ 743.029857][ T9136] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 743.602984][ T9120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.110293][ T9120] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.317804][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.325687][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.554182][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.562134][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.603800][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.083793][ T9136] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.404481][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.412421][ T6211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.654143][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.661900][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.327380][ T9120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.756541][ T9443] loop8: detected capacity change from 0 to 4096 [ 749.077599][ T9443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.115075][ T9136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.821235][ T9120] veth0_vlan: entered promiscuous mode [ 752.076542][ T9120] veth1_vlan: entered promiscuous mode [ 752.630390][ T9120] veth0_macvtap: entered promiscuous mode [ 752.806182][ T9120] veth1_macvtap: entered promiscuous mode [ 753.163593][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.435778][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.657942][ T8888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.689148][ T6212] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.703159][ T6212] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.729601][ T6212] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.790460][ T6212] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.305311][ T9507] loop5: detected capacity change from 0 to 256 [ 754.341804][ T9507] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 754.478577][ T9507] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 754.782396][ T9136] veth0_vlan: entered promiscuous mode [ 754.994534][ T9136] veth1_vlan: entered promiscuous mode [ 755.925365][ T9136] veth0_macvtap: entered promiscuous mode [ 756.021084][ T9136] veth1_macvtap: entered promiscuous mode [ 756.331189][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.468091][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.664570][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.690804][ T3445] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.780428][ T3445] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.831131][ T3445] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.115107][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.842'. [ 758.588568][ T9546] loop5: detected capacity change from 0 to 2048 [ 758.877644][ T9546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.982782][ T29] audit: type=1800 audit(1772699948.824:24): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.843" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 759.345453][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.775296][ T9575] loop5: detected capacity change from 0 to 512 [ 760.906546][ T9575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 761.121752][ T9575] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.850: Unimplemented hash flags: 0x0001 [ 761.231628][ T9575] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.850: Corrupt directory, running e2fsck is recommended [ 761.966291][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 761.973806][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.061538][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.614027][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 762.971966][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.018033][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.309288][ T700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.317435][ T700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.391428][ T9602] loop5: detected capacity change from 0 to 256 [ 763.472931][ T9602] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 763.566379][ T9602] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 764.282023][ T9611] tipc: Started in network mode [ 764.330087][ T9611] tipc: Node identity caa4f92bd0de, cluster identity 4711 [ 764.338296][ T9611] tipc: Enabled bearer , priority 0 [ 764.384139][ T9611] syzkaller0: entered promiscuous mode [ 764.439458][ T9611] syzkaller0: entered allmulticast mode [ 764.569034][ T9613] loop5: detected capacity change from 0 to 512 [ 764.665179][ T9611] tipc: Resetting bearer [ 764.774934][ T9613] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.859: couldn't read orphan inode 26 (err -116) [ 764.854236][ T9610] tipc: Resetting bearer [ 764.860869][ T9613] loop5: lost filesystem error report for type 5 error -116 [ 764.866973][ T9613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.937669][ T9610] tipc: Disabling bearer [ 764.940569][ T9613] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.264873][ T436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.324277][ T436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.337730][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.8.861'. [ 765.423866][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.411613][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.455228][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.921240][ T9641] loop8: detected capacity change from 0 to 256 [ 767.048544][ T9641] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 767.309985][ T9641] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 767.967890][ T9651] loop5: detected capacity change from 0 to 512 [ 768.290423][ T9651] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.871: couldn't read orphan inode 26 (err -116) [ 768.357628][ T9651] loop5: lost filesystem error report for type 5 error -116 [ 768.367133][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 768.381748][ C1] EXT4-fs (loop5): initial error at time 1772699958: ext4_orphan_get:1396 [ 768.390783][ C1] EXT4-fs (loop5): last error at time 1772699958: ext4_orphan_get:1396 [ 768.532936][ T9651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.617126][ T9651] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.145509][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.931619][ T9670] loop7: detected capacity change from 0 to 1024 [ 771.398457][ T9670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 771.574561][ T9670] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.821812][ T9678] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 772.018317][ T9670] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.877: lblock 0 mapped to illegal pblock 0 (length 1) [ 772.515954][ T9670] EXT4-fs error (device loop7): ext4_ext_remove_space:2954: inode #15: comm syz.7.877: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 772.916986][ T9687] loop5: detected capacity change from 0 to 512 [ 773.213527][ T9687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.254233][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 773.267075][ T9694] loop8: detected capacity change from 0 to 256 [ 773.326937][ T9694] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 773.510517][ T9694] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 774.051839][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.132572][ T9699] loop7: detected capacity change from 0 to 256 [ 774.373625][ T29] audit: type=1804 audit(1772699964.252:25): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.883" name="/newroot/3/file0/bus" dev="loop7" ino=1048631 res=1 errno=0 [ 774.879028][ T9705] loop6: detected capacity change from 0 to 512 [ 775.334816][ T9705] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.886: couldn't read orphan inode 26 (err -116) [ 775.438867][ T9705] loop6: lost filesystem error report for type 5 error -116 [ 775.511851][ T9705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.604535][ T9705] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.300545][ T9120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.848468][ T9727] bond0: entered promiscuous mode [ 776.888074][ T9727] bond_slave_0: entered promiscuous mode [ 776.924716][ T9727] bond_slave_1: entered promiscuous mode [ 777.050595][ T9727] batadv0: entered promiscuous mode [ 777.088305][ T9732] loop8: detected capacity change from 0 to 736 [ 777.118158][ T9727] debugfs: 'hsr1' already exists in 'hsr' [ 777.136734][ T9732] iso9660: Unknown parameter 'no[ock' [ 777.153318][ T9727] Cannot create hsr debugfs directory [ 777.210558][ T9727] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 780.855374][ T9772] loop6: detected capacity change from 0 to 736 [ 780.929440][ T9772] iso9660: Unknown parameter 'no[ock' [ 781.216647][ T9777] loop7: detected capacity change from 0 to 256 [ 781.257444][ T9777] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 781.476941][ T9777] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 782.882470][ T9792] 9p: Bad value for 'wfdno' [ 785.115496][ T9813] loop7: detected capacity change from 0 to 736 [ 785.188070][ T9813] iso9660: Unknown parameter 'no[ock' [ 786.528178][ T9829] 9p: Bad value for 'wfdno' [ 790.014031][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'. [ 793.417001][ T9867] 9p: Bad value for 'wfdno' [ 794.734872][ T9876] loop7: detected capacity change from 0 to 2048 [ 794.911200][ T9876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.397868][ T9136] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 795.491025][ T9136] EXT4-fs (loop7): Remounting filesystem read-only [ 796.358271][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.659023][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.953'. [ 797.218641][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.622810][ T9908] 9p: Bad value for 'rfdno' [ 797.624201][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.785044][ T9904] loop6: detected capacity change from 0 to 4096 [ 798.059821][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.133480][ T9904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.628722][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.860469][ T9120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.715523][ T34] bridge_slave_1: left allmulticast mode [ 799.754495][ T34] bridge_slave_1: left promiscuous mode [ 799.761452][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.835520][ T34] bridge_slave_0: left allmulticast mode [ 799.842429][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 799.871496][ T34] bridge_slave_0: left promiscuous mode [ 799.878289][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.233487][ T34] bond0 (unregistering): left promiscuous mode [ 801.288842][ T34] bond_slave_0: left promiscuous mode [ 801.318000][ T34] bond_slave_1: left promiscuous mode [ 801.385967][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.431661][ T9926] loop5: detected capacity change from 0 to 1024 [ 801.490135][ T9926] EXT4-fs: inline encryption not supported [ 801.539629][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.598270][ T9925] loop6: detected capacity change from 0 to 2048 [ 801.605782][ T9926] EXT4-fs: Ignoring removed i_version option [ 801.738791][ T34] bond0 (unregistering): Released all slaves [ 801.831841][ T9926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.839654][ T9925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.702010][ T9120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.848737][ T6712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.925475][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 802.937753][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 802.949542][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 803.033720][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 803.053848][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 804.338673][ T34] batadv0: left promiscuous mode [ 804.668123][ T34] hsr_slave_0: left promiscuous mode [ 804.721615][ T34] hsr_slave_1: left promiscuous mode [ 804.743071][ T9954] 9p: Bad value for 'rfdno' [ 804.761493][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.793129][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.845700][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.897763][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.074507][ T34] veth1_macvtap: left promiscuous mode [ 805.100544][ T34] veth0_macvtap: left promiscuous mode [ 805.118381][ T34] veth1_vlan: left promiscuous mode [ 805.149371][ T34] veth0_vlan: left promiscuous mode [ 805.203692][ T5776] Bluetooth: hci3: command tx timeout [ 805.880454][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 806.458768][ C0] hrtimer: interrupt took 268257 ns [ 807.278773][ T5776] Bluetooth: hci3: command tx timeout [ 808.615895][ T34] team0 (unregistering): Port device team_slave_1 removed [ 808.814701][ T34] team0 (unregistering): Port device team_slave_0 removed [ 809.367155][ T5776] Bluetooth: hci3: command tx timeout [ 809.884031][ T9995] 9p: Bad value for 'rfdno' [ 811.435685][ T5776] Bluetooth: hci3: command tx timeout [ 812.343110][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 814.597352][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.991'. [ 814.835343][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562e5600: rx timeout, send abort [ 815.273635][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.281376][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.367827][T10044] loop7: detected capacity change from 2048 to 2047 [ 815.374977][ T9940] bridge_slave_0: entered allmulticast mode [ 815.406153][ T9940] bridge_slave_0: entered promiscuous mode [ 815.507931][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.561531][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.633862][ T9940] bridge_slave_1: entered allmulticast mode [ 815.703996][ T9940] bridge_slave_1: entered promiscuous mode [ 816.354287][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.529374][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.126678][ T9940] team0: Port device team_slave_0 added [ 817.355271][ T9940] team0: Port device team_slave_1 added [ 818.008409][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.064024][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.201499][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.332948][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.340131][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.573174][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.629159][ T9940] hsr_slave_0: entered promiscuous mode [ 819.744181][ T9940] hsr_slave_1: entered promiscuous mode [ 819.808584][ T9940] debugfs: 'hsr0' already exists in 'hsr' [ 819.844177][ T9940] Cannot create hsr debugfs directory [ 823.378884][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.397713][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.412156][ T9940] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 823.625100][ T9940] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 823.807199][ T9940] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 823.952905][T10125] xt_hashlimit: size too large, truncated to 1048576 [ 823.972253][ T9940] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 826.363432][T10154] ===================================================== [ 826.370960][T10154] BUG: KMSAN: uninit-value in netif_skb_features+0x6fb/0x1870 [ 826.378905][T10154] netif_skb_features+0x6fb/0x1870 [ 826.384363][T10154] validate_xmit_skb+0xb6/0x2400 [ 826.389781][T10154] validate_xmit_skb_list+0xd4/0x320 [ 826.395313][T10154] sch_direct_xmit+0xd4/0xcf0 [ 826.400594][T10154] __dev_queue_xmit+0x301d/0x5980 [ 826.405853][T10154] packet_xmit+0x8f/0x710 [ 826.410428][T10154] packet_sendmsg+0x91d9/0xa320 [ 826.415672][T10154] ____sys_sendmsg+0xfe7/0x1080 [ 826.420897][T10154] ___sys_sendmsg+0x271/0x3b0 [ 826.425717][T10154] __x64_sys_sendmsg+0x211/0x3e0 [ 826.430838][T10154] x64_sys_call+0x1e20/0x3ea0 [ 826.435723][T10154] do_syscall_64+0x134/0xf80 [ 826.440498][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.446679][T10154] [ 826.449129][T10154] Uninit was created at: [ 826.453555][T10154] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 826.459769][T10154] __alloc_skb+0x855/0x1190 [ 826.464485][T10154] alloc_skb_with_frags+0xc5/0xa60 [ 826.469858][T10154] sock_alloc_send_pskb+0xacb/0xc60 [ 826.475259][T10154] packet_sendmsg+0x7477/0xa320 [ 826.480338][T10154] ____sys_sendmsg+0xfe7/0x1080 [ 826.485499][T10154] ___sys_sendmsg+0x271/0x3b0 [ 826.490388][T10154] __x64_sys_sendmsg+0x211/0x3e0 [ 826.495446][T10154] x64_sys_call+0x1e20/0x3ea0 [ 826.500341][T10154] do_syscall_64+0x134/0xf80 [ 826.505201][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.511317][T10154] [ 826.513734][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.1.1024 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.525015][T10154] Tainted: [L]=SOFTLOCKUP [ 826.529656][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 826.539919][T10154] ===================================================== [ 826.546947][T10154] Disabling lock debugging due to kernel taint [ 826.553240][T10154] Kernel panic - not syncing: kmsan.panic set ... [ 826.559746][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.1.1024 Tainted: G B L syzkaller #0 PREEMPT(full) [ 826.571025][T10154] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 826.576740][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 826.586990][T10154] Call Trace: [ 826.590359][T10154] [ 826.593375][T10154] __dump_stack+0x26/0x30 [ 826.597966][T10154] dump_stack_lvl+0x50/0x1c0 [ 826.602821][T10154] ? dump_stack+0x12/0x25 [ 826.607427][T10154] dump_stack+0x1e/0x25 [ 826.611886][T10154] vpanic+0x7b4/0x1430 [ 826.616316][T10154] panic+0x15d/0x160 [ 826.620521][T10154] kmsan_report+0x31a/0x320 [ 826.625233][T10154] ? __msan_warning+0x1b/0x30 [ 826.630146][T10154] ? netif_skb_features+0x6fb/0x1870 [ 826.635696][T10154] ? validate_xmit_skb+0xb6/0x2400 [ 826.640997][T10154] ? validate_xmit_skb_list+0xd4/0x320 [ 826.646701][T10154] ? sch_direct_xmit+0xd4/0xcf0 [ 826.651729][T10154] ? __dev_queue_xmit+0x301d/0x5980 [ 826.657084][T10154] ? packet_xmit+0x8f/0x710 [ 826.661858][T10154] ? packet_sendmsg+0x91d9/0xa320 [ 826.667020][T10154] ? ____sys_sendmsg+0xfe7/0x1080 [ 826.672291][T10154] ? ___sys_sendmsg+0x271/0x3b0 [ 826.677496][T10154] ? __x64_sys_sendmsg+0x211/0x3e0 [ 826.682719][T10154] ? x64_sys_call+0x1e20/0x3ea0 [ 826.687803][T10154] ? do_syscall_64+0x134/0xf80 [ 826.692737][T10154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.698939][T10154] ? __skb_flow_dissect+0x941a/0xa1f0 [ 826.704517][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.709811][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.715102][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.720394][T10154] __msan_warning+0x1b/0x30 [ 826.725224][T10154] netif_skb_features+0x6fb/0x1870 [ 826.730835][T10154] validate_xmit_skb+0xb6/0x2400 [ 826.735945][T10154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.741955][T10154] ? mrp_pdu_append_vecattr_event+0x2a91/0x2aa0 [ 826.748415][T10154] ? filter_irq_stacks+0x49/0x190 [ 826.753716][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.759243][T10154] validate_xmit_skb_list+0xd4/0x320 [ 826.764769][T10154] sch_direct_xmit+0xd4/0xcf0 [ 826.769605][T10154] ? kmsan_get_metadata+0x146/0x160 [ 826.774973][T10154] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 826.781474][T10154] __dev_queue_xmit+0x301d/0x5980 [ 826.786663][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.792031][T10154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.798120][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.803537][T10154] ? __dev_queue_xmit+0x27a/0x5980 [ 826.808894][T10154] packet_xmit+0x8f/0x710 [ 826.813373][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.818645][T10154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.824753][T10154] packet_sendmsg+0x91d9/0xa320 [ 826.829842][T10154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.836086][T10154] ? aa_label_sk_perm+0x759/0x810 [ 826.841425][T10154] ? tomoyo_socket_sendmsg_permission+0x31/0x590 [ 826.848181][T10154] ? filter_irq_stacks+0x49/0x190 [ 826.853477][T10154] ? cpu_rmap_update+0x800/0xd20 [ 826.858575][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.863861][T10154] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 826.870479][T10154] ? __pfx_packet_sendmsg+0x10/0x10 [ 826.875821][T10154] ? __pfx_packet_sendmsg+0x10/0x10 [ 826.881178][T10154] ____sys_sendmsg+0xfe7/0x1080 [ 826.886226][T10154] ___sys_sendmsg+0x271/0x3b0 [ 826.891070][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.896496][T10154] ? __rcu_read_unlock+0x6c/0xd0 [ 826.901773][T10154] ? __fget_files+0x3b4/0x4a0 [ 826.906603][T10154] ? __fget_files+0x3b9/0x4a0 [ 826.911430][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.916781][T10154] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.922757][T10154] __x64_sys_sendmsg+0x211/0x3e0 [ 826.927848][T10154] ? kmsan_get_metadata+0xf1/0x160 [ 826.933146][T10154] x64_sys_call+0x1e20/0x3ea0 [ 826.937969][T10154] do_syscall_64+0x134/0xf80 [ 826.942683][T10154] ? clear_bhb_loop+0x50/0xa0 [ 826.947701][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.953833][T10154] RIP: 0033:0x7f560bd9c799 [ 826.958424][T10154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.978341][T10154] RSP: 002b:00007f560cc17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.987077][T10154] RAX: ffffffffffffffda RBX: 00007f560c015fa0 RCX: 00007f560bd9c799 [ 826.995365][T10154] RDX: 00000000200400d1 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 827.003531][T10154] RBP: 00007f560be32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 827.011806][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.019882][T10154] R13: 00007f560c016038 R14: 00007f560c015fa0 R15: 00007ffc246b4aa8 [ 827.028106][T10154] [ 827.031700][T10154] Kernel Offset: disabled [ 827.036246][T10154] Rebooting in 86400 seconds..