last executing test programs: 3m41.28973817s ago: executing program 32 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x5, 0x8, 0x0, 0x1, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3m28.142089096s ago: executing program 33 (id=132): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x0, 0x5, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc5a, 0x2, 0x0, 0x0, 0x85, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000001, 0x3, 0xfffffffffffffffc, 0x4, 0x0, 0x7, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x10001, 0xebf, 0x0, 0x0, 0x751, 0x0, 0x0, 0x67, 0x7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008001, 0x3, 0x4, 0x0, 0x0, 0x0, 0xf32, 0x11, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x0, 0x1553, 0x40, 0x0, 0x1]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) syz_genetlink_get_family_id$nl802154(0x0, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f00000001c0)=ANY=[], 0x1, 0x1508, &(0x7f0000002d40)="$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") r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000200)='./file0/file0\x00', 0x0) 3m12.018864808s ago: executing program 34 (id=240): syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) 3m9.300293992s ago: executing program 35 (id=255): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2004c8, 0x0, 0x1fe], 0xdddd1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m47.95832701s ago: executing program 8 (id=404): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x18, &(0x7f00000005c0)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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") 2m47.711612681s ago: executing program 8 (id=405): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001a00010000000000fedbdf25020000010000ff"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m47.550460202s ago: executing program 8 (id=408): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f00000023c0)=ANY=[], 0x7, 0x6ed, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002180)={@private2, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013, r0}) lstat(0x0, 0x0) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) syz_usb_control_io(r3, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000d00)={0x0, 0x0, 0x2, "8235"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x40, 0x17, 0x78, "700a2fd12cb73f037ed6a6dcf55eb146692912fa964f08bb5272f0d62fc29289188c20c9828e4ac0ad67e3c97cbe3243c47481dca74c5cd5a61151c930edba73b4834fad893c1c70bb3950a9c844101658822028839a1b4684212a6c830f14c0c7f6a0375a170a349ff4da66c9d0aa5618b2070c914bd1ab"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xd}}) 2m45.542566432s ago: executing program 8 (id=417): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000001180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@noblock_validity}, {@mblk_io_submit}, {@nodiscard}, {@noinit_itable}, {@abort}, {@noacl}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1c, 0x4df, &(0x7f0000000540)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents(r0, &(0x7f0000000100)=""/78, 0x4e) 2m44.720597536s ago: executing program 3 (id=424): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) write$char_usb(r0, &(0x7f0000000e80)="2c22f4c9968cabeeba655d12f27fe96af5e028cb44ad49f491b583d882c1826bd3ac1161d6f4f3e06d9248", 0x2b) 2m44.341396319s ago: executing program 8 (id=427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x29}}, &(0x7f0000000240)={0x0, 0x67, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m44.323048368s ago: executing program 3 (id=428): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f00000023c0)=ANY=[], 0x7, 0x6ed, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002180)={@private2, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013, r0}) lstat(0x0, 0x0) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) syz_usb_control_io(r3, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000d00)={0x0, 0x0, 0x2, "8235"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x40, 0x17, 0x78, "700a2fd12cb73f037ed6a6dcf55eb146692912fa964f08bb5272f0d62fc29289188c20c9828e4ac0ad67e3c97cbe3243c47481dca74c5cd5a61151c930edba73b4834fad893c1c70bb3950a9c844101658822028839a1b4684212a6c830f14c0c7f6a0375a170a349ff4da66c9d0aa5618b2070c914bd1ab"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xd}}) 2m43.598656062s ago: executing program 8 (id=432): socket(0x840000000002, 0x3, 0xff) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) read$usbfs(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) 2m43.482480303s ago: executing program 36 (id=432): socket(0x840000000002, 0x3, 0xff) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) read$usbfs(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) 2m42.216760929s ago: executing program 3 (id=436): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 2m41.858549111s ago: executing program 3 (id=437): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000001180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@noblock_validity}, {@mblk_io_submit}, {@nodiscard}, {@noinit_itable}, {@abort}, {@noacl}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1c, 0x4df, &(0x7f0000000540)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents(r0, &(0x7f0000000100)=""/78, 0x4e) 2m41.446852813s ago: executing program 6 (id=439): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x6b4c71a66f00f0b8, 0x3, 0xd9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x8, "d7"}]}}, 0x0}, 0x0) 2m40.254498949s ago: executing program 3 (id=443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008004}}], 0x1, 0x4000001) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)={0x7fffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 2m39.778295992s ago: executing program 3 (id=446): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r2, 0x408}, {r1, 0x25c0}], 0x2, &(0x7f0000000140), 0x0, 0x0) dup3(r1, r0, 0x0) 2m39.715072382s ago: executing program 37 (id=446): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r2, 0x408}, {r1, 0x25c0}], 0x2, &(0x7f0000000140), 0x0, 0x0) dup3(r1, r0, 0x0) 2m39.173095865s ago: executing program 6 (id=449): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) unshare(0x20040400) socket$unix(0x1, 0x1, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000400)={[{@lazytime}, {@noinit_itable}, {@debug}], [{@audit}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}, 0x0, 0x548, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTH42TZst9AAVsAsUFrRae+Nto6qXdi8gVFVCVBwQh21IvFGIHYfYKU2IRPo3gAQSJ/gTOCBxQOqJAzeO3BBSOSAtEIE2SFQYeTxJ3azdeDeODfHnI83Oj5e873v2zrznN/G8AMbWtYg4iIjpiHgzIhby40m+xKvtpfVzDw73V44O91fiP83mG39LsvTWseO8mvn6yTzP2Yj4xlcjvpM8HLe+u7exXKmUt/P9YqO6Vazv7t1cry6vldfKm6XS0uLSrZduv1gaWF2vVn95/yvrr33zN7/+9Hu/P/jyD1rFms/TOusxSO2qT53EaZmMiNcuItgITOTr6RGXg8eTRsTHIuJz2fm/EBPZ/04A4DJrNheiudC5DwBcdmk2BpakhXwsYD7StFBoj+E9G3NppVZv3LhX29lcbY+VXYmpdCbvK3wv+3cqubdeKS9maVl6tl86tX87Ip6JiB/PPJHtF1ZqldXRdHkAYOw9ear9/+dMu/3vQ5e7egDA/43ZURcAABg67T8AjB/tPwCMnz7a//xm/8GFlwUAGA6f/wFg/Gj/AWD8aP8BYKx8/fXXW0vzKH/+9epbuzsbtbdurpbrG4Xqzkphpba9VVir1dayZ/ZUz8qvUqttLb4QO28XG+V6o1jf3btbre1sNu5mz/W+W54aSq0AgI/yzNV3/5BExMHLT2RLmMsBxkY66gIAIzMx6gIAI2O2Lxhf/Y/H/+5CywGMTteHec923fzwoMFPHyGIvzOC/ynXP9l7/P9038B9AbhcjP/D+Hq88f9XBl4OYPi6jf/r58N4aDaT4zn/p/Pp/6dPkgCAS+kc38dr/nBQnRBgpM6azLvnrftHuf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8x8RHw3krSQzwU+H2laKEQ8FRFXYiq5t14p34qIp+NqREzNtPYXR11oAOCc0r8k+fxf1xeenz+dOp38aybyOcG//7M3fvL2cqOxvdg6/veT4zPH04eVPvi9c8wrCAAMWNZ+l/J1xwf5B4f7K8fLMMtz/068n09FvHJ0uJ8t7ZTJmMzWs1lfYu4fSb7fnov0uYiYGED8g3ci4hMn9U/ebzbz+Ek2NnIln/m0M37ksZ8afPyO1/90/PRD8dMsrb1udb4+firfdABlg8vu3TsR8Wq38y+Na9m6+/k/m12hzu/+nXZmx9e+o474x9e/iS7xW+f8tX5jvPDbrz10sLnQTnsn4rnJbvGTk/hJj/jP9xn/j5/6zI9e6ZHW/HnE9egevzNWsVHdKtZ3926uV5fXymvlzVJpaXHp1ku3XywVszHq4vFI9cP++vKNp3uVrVX/uR7xZ7vWf/rkd7/QZ/1/8e83v/3Zj4j/pc93f/+f7Rq/rdUmfrHP+Mtzv+o5fXcr/mqP+p/1/t/oM/57f95b7fNHAYAhqO/ubSxXKuXtc220Pm0OIp9sY7rjSKuIAylhnxt/iuHFOnNjapCv6lA3Jk/6ioPN+VutHIdcnXTgtTjXxoNhxRrtdQm4eB+c9KMuCQAAAAAAAAAAAAAA0Mswvro06joCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwef03AAD//yLnx6o=") fsetxattr(r1, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) 2m38.878483406s ago: executing program 6 (id=451): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4000000000000002, 0xffffffffffffffff, 0x0, 0x200000000007ff, 0x3000000, 0x6, 0x0, 0x1, 0x20}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3810744, &(0x7f0000000200)={[{@data_err_abort}, {@noinit_itable}, {@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@quota}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dax_inode}]}, 0x1, 0x470, &(0x7f0000000b00)="$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") ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 2m38.12884644s ago: executing program 6 (id=453): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000001180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@noblock_validity}, {@mblk_io_submit}, {@nodiscard}, {@noinit_itable}, {@abort}, {@noacl}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1c, 0x4df, &(0x7f0000000540)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ5bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIxtsKc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweudM7Rlb7nSOjonnsPRwH0rVMRcToiHlar1bMRMdwozzS2K7XMZn2/B/dvz9S2JKrVa58mEUm9rLbL2JbXPFJ/ShyMiD/9PuKvydNxy+sbi9PFYmG1kc9Xllby5fWNcwtL0/OF+cLy5OTExalLUxemxjvSzqGIuPzbD//zz1d/d/nNX9x87/rHY39LGuURj9vRafWmZ9P3omkwIlb3IliPDKYtBADgu6B5nP/TiDgbwzGQHs0BAAAA+0n110PxdRJRBQAAAPatTDoHNsnkGvMAhiKTyeXqc3h/GIczxVK58vO50trybH2u7EhkM3MLxcJ4Y67wSGSTWn4iTT/On9+Wn4yIYxHx7+FDaT43UyrO9vrkBwAAAPSJI9vG/18M18f/W3zVs8oBAAAAnTPS6woAAAAAe874HwAAAPY/438AAADY1/5w9Wptqzb//3r2xvraYunGudlCeTG3tDaTmymtruTmS6X5dM2+pZ1er1gqrfwyltdu5SuFciVfXt+4vlRaW65cX3jiL7ABAACALjr2k7vvJhGx+atD6VZzoNeVArpi8Hl2/mDv6gF030CvKwD0zHP9/gP7SrbXFQB6Ltnh8baTd97qfF0AAIC9Mfqj1tf/B3Y8N7CZ6VIVgT3i/B/0L9f/oX+5/g/9KxsDYSAP/W2nJUBf/Pp/tfpcFQIAADpuKN2STC4iPQ8wFJlMLhdxNB0TZJO5hWJhPCK+HxHvDGe/V8tPpM9MdpwzDAAAAAAAAAAAAAAAAAAAAAAAAADUVatJVAEAAIB9LSLzUZKu5h8xOnxmaPv5gQPJl8PpfUTc/P+1/96arlRWJ2rlnz0qr/yvUX6+F2cwAAAAgO2a4/TmOB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOunB/dszza2bcT/5TUSMtIo/GAfT+4ORjYjDnycxuOV5SUQMdCD+5p2ION4qflKrVow0atEq/qEexz/SgfjQz+7W+p8rrb5/mTiV3rf+/l1Me6gX177/yzzq/wZaxK+VHd1ljBP3Xs+3jX8n4sRg6/6nGT9p0/+c3mX8v/x5Y6PdY9VXIkZb/v4kT8TKV5ZW8uX1jXMLS9PzhfnC8uTkxMWpS1MXpsbzcwvFQuO2ZYx//fiNh89q/+E28Ud2aP+ZXbb/m3u37v+gnsy2ij92uvXnf7xN/Ezj8/9ZI117fLSZ3qyntzr52tsnn9X+2Tbt3+nzH9tl+8/+8R/v73JXAKALyusbi9PFYmG1rxMv9G7UDoteila8nIna+/oSVKNl4u978Mq1I/Net6sTiZ52SwAAwB54egwMAAAAAAAAAAAAAAAAAAAAdFs3lhPbvujxZnrbidXzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA659sAAAD//0LO0gs=") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents(r0, &(0x7f0000000100)=""/78, 0x4e) 2m37.162589025s ago: executing program 6 (id=454): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m36.563026927s ago: executing program 6 (id=455): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f00000008c0)='wchan\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) pread64(r4, &(0x7f0000000280)=""/252, 0xfc, 0x0) 2m36.460237808s ago: executing program 38 (id=455): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f00000008c0)='wchan\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) pread64(r4, &(0x7f0000000280)=""/252, 0xfc, 0x0) 2m24.805437717s ago: executing program 7 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000002020104"], 0x30}}, 0x0) 2m24.634477868s ago: executing program 7 (id=491): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 2m23.715031823s ago: executing program 7 (id=494): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x578410eb) 2m22.597300559s ago: executing program 7 (id=498): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000001180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@noblock_validity}, {@mblk_io_submit}, {@nodiscard}, {@noinit_itable}, {@abort}, {@noacl}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1c, 0x4df, &(0x7f0000000540)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents(r0, 0x0, 0x0) 2m20.771594118s ago: executing program 7 (id=503): sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}}, 0x890) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) 2m18.47457756s ago: executing program 7 (id=514): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f0000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 2m18.28952208s ago: executing program 39 (id=514): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f0000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 1m57.478608755s ago: executing program 4 (id=621): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 1m57.357557006s ago: executing program 4 (id=623): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) 1m56.989596118s ago: executing program 4 (id=626): r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semop(r0, &(0x7f0000000380)=[{}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 1m56.686543499s ago: executing program 4 (id=627): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000003c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {}, {@dioread_lock}]}, 0x10, 0x4d2, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x3, 0x0, 0x1a00) futex(0x0, 0x5, 0x100000, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x1, 0x12) 1m55.042699628s ago: executing program 4 (id=641): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m54.346915561s ago: executing program 4 (id=644): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410eb) 1m54.217223752s ago: executing program 40 (id=644): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410eb) 1m20.601248952s ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m15.540238108s ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r0) 1m9.13418417s ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m3.111966401s ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r0) 54.311086575s ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 49.265622811s ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r0) 35.63924192s ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 34.851510654s ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r0) 21.548452071s ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 20.154061128s ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r0) 15.242254093s ago: executing program 9 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05ffffff800000006bf60900000000008510000002000000850000000000000095000000000000009500a5050000000030bd980b93aa8ae53a62eac25f5d499596841afc99a6de94afe4af0caf67b76863dda021bf19b5df27c242bae5023e0031f13d7d7a780cf28188463446eb1e239ccf810a1585d0c7363a79d83d4f5889a308997c78"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file1'}, 0xb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x472080, 0x4) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6040480}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40058}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.955629354s ago: executing program 9 (id=1195): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) dup3(r1, r0, 0x0) 14.707059876s ago: executing program 9 (id=1198): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000500)=""/187, 0xe6}], 0x19, 0x4, 0xd301) 14.579112156s ago: executing program 9 (id=1199): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x68) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYRES64, @ANYRES8=0x0, @ANYBLOB="d60a83a1f0457481edbb22ba9409462e156a7c242a", @ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x1c4, &(0x7f0000000440)="$eJzsVb/uEkEQ/uZu4UAtqG0lQqPA2fgG8gA+gAROJB7+4S5RCMVpQ2NhfAkSn8LCRHsLY0xssNBECyxJDGZ359YlasDkyO/3S/ZLyHzzzc7sDpedvZM8TAIAP9fzPmpQIFzARyIIAA3S2qas7Q+2W8YXof0O6y/ZfmabTGfvnmk6u9uL42iSTPcQImDfmh1y0KLDydunuwqhqMpFk9TX/+yfoec7SvC3NZyLE++iOOL/s52vRe9VwrHbAYxCB2R9eKE/52n5Fkci3n9lJeDxldx44uG7ct6v531JbvEUk9pA//IrodZI57W15qIAMoB8bE0doaYl0ADQSscPWsl0dmU07g2jYXQvDJG135znKxq1W7dHcdQm6xieJAIG8p5WrXgJwKff8QwWyDqaxDmA7Fw5f/Ph3LxkJVYBz8q1a+i6r0yNgDX5V9zEZVQAPMpkOGS1DllNQLXWBcFnpyOscwIbeKiowNX+/XiwAIHytCWEqdFZoSQdyoAoZEdFrl037S/Y1tl22S7Zrtjmb1f+JglV4Rt7zQwo43EvTSfq8dLMaKHRwprZ2eNd89eQ8pMEcHBwcHBwcHA4I/gVAAD//7B1VIM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 13.93174689s ago: executing program 9 (id=1203): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 10.046382389s ago: executing program 9 (id=1220): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40050) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='io\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000500)=""/187, 0xe6}], 0x19, 0x4, 0xd301) 9.91174872s ago: executing program 41 (id=1220): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40050) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='io\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000500)=""/187, 0xe6}], 0x19, 0x4, 0xd301) 7.242904354s ago: executing program 2 (id=1228): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708000000dad2007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.003516124s ago: executing program 2 (id=1229): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffc00, 0x0, 0xfffffffffffffffc, 0x3f}) 6.396972348s ago: executing program 2 (id=1230): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.82886472s ago: executing program 2 (id=1231): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fchmodat(r0, &(0x7f0000000140)='./file1\x00', 0x120) r1 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 5.192242064s ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3.644071432s ago: executing program 2 (id=1234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x18}, {&(0x7f0000000000)="2303942fe0dfd8f8c04e6ae35e91", 0xe}], 0x2) 2.594919487s ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r0) 1.736568971s ago: executing program 2 (id=1243): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x2000, 0x0, @mcast2}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xa7) lseek(r1, 0xffff7fff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0x4f9b4a1249a519a9, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000440)={r5, r5, 0x8, 0x0, 0x0, 0xb, 0x6f, 0x46d, 0xffeb, 0x7, 0x0, 0xc, 'syz0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x9, 0x0, 0x3}, 0x20) r8 = semget$private(0x0, 0x1, 0x0) semctl$GETZCNT(r8, 0x1, 0xf, &(0x7f0000000240)=""/133) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x100) write$P9_RWALK(r1, &(0x7f0000000200)={0x23, 0x6f, 0x1, {0x2, [{0x92, 0x1, 0x5}, {0x0, 0x4, 0x1}]}}, 0x23) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) 442.407468ms ago: executing program 5 (id=1255): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 348.055728ms ago: executing program 5 (id=1256): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000140c) 193.551259ms ago: executing program 5 (id=1257): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x81}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f0000000380)=' ', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 74.46734ms ago: executing program 5 (id=1258): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 45.58707ms ago: executing program 5 (id=1259): syz_emit_ethernet(0x7a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00042f002001000000000000000000000000000200000000000000000000ffff000000002421880b0000000000000021000086"], 0x0) 0s ago: executing program 5 (id=1260): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40500000000000071106800000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): 7295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.957" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 233.958836][ T26] audit: type=1800 audit(1731680203.870:14): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.957" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 233.990817][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.007792][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.053993][ T8840] loop5: detected capacity change from 0 to 1024 [ 234.066536][ T8601] device veth0_vlan entered promiscuous mode [ 234.114390][ T8840] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 234.122139][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.162822][ T8840] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.201830][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.212240][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.220883][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.229766][ T8840] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 234.262442][ T8840] System zones: 0-1, 3-36 [ 234.270726][ T8840] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 234.306985][ T8601] device veth1_vlan entered promiscuous mode [ 234.389615][ T8601] device veth0_macvtap entered promiscuous mode [ 234.401482][ T8840] EXT4-fs (loop5): shut down requested (2) [ 234.408592][ T8853] syz.9.962 (8853) used obsolete PPPIOCDETACH ioctl [ 234.409642][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.428095][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.463900][ T8601] device veth1_macvtap entered promiscuous mode [ 234.488142][ T8856] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 234.508388][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.524621][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.541937][ T8859] loop2: detected capacity change from 0 to 1024 [ 234.563065][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 234.611141][ T1222] hfsplus: b-tree write err: -5, ino 4 [ 234.615736][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.633030][ T4653] Bluetooth: hci1: command 0x041b tx timeout [ 234.639720][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.654298][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.670174][ T8863] binder: 8862:8863 ioctl c018620c 20000000 returned -22 [ 234.677528][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.700415][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.726004][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.781082][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.800779][ T8869] loop9: detected capacity change from 0 to 512 [ 234.812208][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.842992][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.882784][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.915853][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.949941][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.967062][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.978171][ T8729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.052828][ T1324] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 235.061825][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.963'. [ 235.085178][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.114364][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.168315][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.197297][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.208983][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.219773][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.229710][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.241068][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.251006][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.261632][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.271779][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.298208][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.311130][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.321727][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.333443][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.348420][ T8729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.383086][ T5940] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 235.424080][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.434671][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.455009][ T8601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.464419][ T1324] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 235.472520][ T1324] usb 3-1: config 0 has no interface number 0 [ 235.479222][ T8601] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.488268][ T1324] usb 3-1: too many endpoints for config 0 interface 97 altsetting 8: 187, using maximum allowed: 30 [ 235.499552][ T8601] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.508542][ T1324] usb 3-1: config 0 interface 97 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 235.522090][ T8601] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.532050][ T1324] usb 3-1: config 0 interface 97 has no altsetting 0 [ 235.542209][ T1324] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.551743][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.559904][ T8729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.575229][ T8729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.591854][ T1324] usb 3-1: config 0 descriptor?? [ 235.663024][ T154] device hsr_slave_0 left promiscuous mode [ 235.669555][ T154] device hsr_slave_1 left promiscuous mode [ 235.682052][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.689787][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.697993][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.706216][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.718694][ T154] device bridge_slave_1 left promiscuous mode [ 235.730100][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.742939][ T4244] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 235.753717][ T5940] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 235.764815][ T154] device bridge_slave_0 left promiscuous mode [ 235.771025][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.778897][ T5940] usb 6-1: too many endpoints for config 32 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 235.790605][ T5940] usb 6-1: config 32 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 235.804492][ T5940] usb 6-1: config 32 interface 0 has no altsetting 0 [ 235.811225][ T5940] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 235.820813][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.845380][ T154] device hsr_slave_0 left promiscuous mode [ 235.852645][ T154] device hsr_slave_1 left promiscuous mode [ 235.865388][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.873310][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.881198][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.899067][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.914523][ T154] device bridge_slave_1 left promiscuous mode [ 235.920741][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.938112][ T154] device bridge_slave_0 left promiscuous mode [ 235.945109][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.962397][ T154] device veth1_macvtap left promiscuous mode [ 235.969878][ T154] device veth0_macvtap left promiscuous mode [ 235.976280][ T154] device veth1_vlan left promiscuous mode [ 235.982165][ T154] device veth0_vlan left promiscuous mode [ 235.989873][ T154] device veth1_macvtap left promiscuous mode [ 235.996834][ T154] device veth0_macvtap left promiscuous mode [ 236.003094][ T154] device veth1_vlan left promiscuous mode [ 236.008971][ T154] device veth0_vlan left promiscuous mode [ 236.079995][ T4284] usb 6-1: USB disconnect, device number 12 [ 236.133314][ T4244] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.146971][ T4244] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.183786][ T4244] usb 10-1: config 0 descriptor?? [ 236.234486][ T4244] cp210x 10-1:0.0: cp210x converter detected [ 236.338060][ T154] team0 (unregistering): Port device team_slave_1 removed [ 236.353219][ T154] team0 (unregistering): Port device team_slave_0 removed [ 236.366714][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.380649][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.443649][ T4244] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 236.451263][ T4244] cp210x 10-1:0.0: querying part number failed [ 236.473679][ T4244] usb 10-1: cp210x converter now attached to ttyUSB0 [ 236.507901][ T154] bond0 (unregistering): Released all slaves [ 236.683552][ T8897] binder: 8895:8897 ioctl c0306201 0 returned -14 [ 236.691039][ T154] team0 (unregistering): Port device team_slave_1 removed [ 236.711834][ T154] team0 (unregistering): Port device team_slave_0 removed [ 236.723132][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 236.729513][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.748840][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.791749][ T8898] loop9: detected capacity change from 0 to 256 [ 236.825191][ T154] bond0 (unregistering): Released all slaves [ 236.883216][ T8898] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 236.935228][ T1324] usb 3-1: string descriptor 0 read error: -71 [ 236.956336][ T1324] cp210x 3-1:0.97: cp210x converter detected [ 237.013151][ T1324] cp210x 3-1:0.97: failed to get vendor val 0x370b size 1: -71 [ 237.023222][ T1324] cp210x 3-1:0.97: querying part number failed [ 237.031333][ T1324] usb 3-1: cp210x converter now attached to ttyUSB1 [ 237.057355][ T1324] usb 3-1: USB disconnect, device number 17 [ 237.099071][ T1324] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 237.129092][ T4489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.142222][ T1324] cp210x 3-1:0.97: device disconnected [ 237.149338][ T4489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.190623][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.200855][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.233145][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.255619][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.263336][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.300531][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.310832][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.340505][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.452447][ T4285] hfsplus: b-tree write err: -5, ino 4 [ 237.488856][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.521822][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.562879][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.569968][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.601189][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.619451][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.663585][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.701113][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.708261][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.735845][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.770601][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.796102][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.838637][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.874758][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.904411][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.950363][ T8729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.979657][ T8729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.050093][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.064087][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.081888][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.103399][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.151373][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.214044][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.448048][ T5940] usb 10-1: USB disconnect, device number 28 [ 238.486606][ T5940] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 238.501819][ T8953] loop2: detected capacity change from 0 to 1024 [ 238.522008][ T5940] cp210x 10-1:0.0: device disconnected [ 238.643873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.651402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.657236][ T8960] loop9: detected capacity change from 0 to 128 [ 238.686444][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.778925][ T8960] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.789887][ T8960] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.822148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.830761][ T1335] Bluetooth: hci1: command 0x0419 tx timeout [ 238.840109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.923468][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.932660][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.959442][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.990616][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.013016][ T1335] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 239.020791][ T8729] device veth0_vlan entered promiscuous mode [ 239.052341][ T8729] device veth1_vlan entered promiscuous mode [ 239.074473][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.150218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.169353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.191855][ T8729] device veth0_macvtap entered promiscuous mode [ 239.218260][ T8729] device veth1_macvtap entered promiscuous mode [ 239.244400][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.274580][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.293591][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.305042][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.315311][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.326163][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.336631][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.347694][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.358193][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.369534][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.384981][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.396818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.419112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.438058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.447960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.459121][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.470833][ T1335] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 239.479221][ T1335] usb 3-1: config 0 has no interface number 0 [ 239.492851][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.510277][ T1335] usb 3-1: too many endpoints for config 0 interface 97 altsetting 8: 187, using maximum allowed: 30 [ 239.523219][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.541453][ T1335] usb 3-1: config 0 interface 97 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 239.554030][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.555293][ T1335] usb 3-1: config 0 interface 97 has no altsetting 0 [ 239.578592][ T1335] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.582802][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.589485][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.613019][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.616098][ T1335] usb 3-1: config 0 descriptor?? [ 239.634588][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.646236][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.656127][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.666607][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.678195][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.693785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.703460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.714638][ T8729] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.723866][ T8729] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.732581][ T8729] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.741332][ T8729] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.929534][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.959200][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.017025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.052952][ T1335] usb 3-1: string descriptor 0 read error: -71 [ 240.059989][ T1335] cp210x 3-1:0.97: cp210x converter detected [ 240.067555][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.106903][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.107266][ T8990] loop9: detected capacity change from 0 to 1024 [ 240.139140][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.153031][ T1335] cp210x 3-1:0.97: failed to get vendor val 0x370b size 1: -71 [ 240.161112][ T1335] cp210x 3-1:0.97: querying part number failed [ 240.179231][ T1335] usb 3-1: cp210x converter now attached to ttyUSB0 [ 240.198142][ T1335] usb 3-1: USB disconnect, device number 18 [ 240.206915][ T1335] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.215230][ T1335] cp210x 3-1:0.97: device disconnected [ 240.253164][ T8990] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 240.319614][ T8990] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.360368][ T8990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 240.376496][ T8990] System zones: 0-1, 3-36 [ 240.433606][ T8990] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 240.585620][ T4489] hfsplus: b-tree write err: -5, ino 4 [ 240.689136][ T8996] chnl_net:caif_netlink_parms(): no params data found [ 240.770991][ T8990] EXT4-fs (loop9): shut down requested (2) [ 240.870456][ T9019] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 241.156719][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.172840][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.192061][ T8996] device bridge_slave_0 entered promiscuous mode [ 241.231536][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.242547][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.253445][ T8996] device bridge_slave_1 entered promiscuous mode [ 241.360345][ T9038] loop5: detected capacity change from 0 to 128 [ 241.379303][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.490812][ T9037] device syzkaller0 entered promiscuous mode [ 241.533213][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.638862][ T9038] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.677722][ T9038] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.720123][ T8996] team0: Port device team_slave_0 added [ 241.922607][ T9061] loop5: detected capacity change from 0 to 2048 [ 241.961327][ T8996] team0: Port device team_slave_1 added [ 241.984032][ T9061] loop5: p3 < > p4 < > [ 242.002536][ T9061] loop5: partition table partially beyond EOD, truncated [ 242.035969][ T9061] loop5: p3 start 4284289 is beyond EOD, truncated [ 242.055017][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.061988][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.100922][ T8996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.133598][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.201251][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.297579][ T8996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.313569][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 243.029029][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 243.646983][ T9098] loop9: detected capacity change from 0 to 128 [ 243.774648][ T9098] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.789654][ T8996] device hsr_slave_0 entered promiscuous mode [ 243.796169][ T9098] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.828830][ T8996] device hsr_slave_1 entered promiscuous mode [ 243.838701][ T8996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.882035][ T8996] Cannot create hsr debugfs directory [ 243.924502][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.265321][ T9101] chnl_net:caif_netlink_parms(): no params data found [ 244.393086][ T5939] Bluetooth: hci0: command 0x041b tx timeout [ 244.502549][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.520181][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.531457][ T9101] device bridge_slave_0 entered promiscuous mode [ 244.557362][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.571324][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.589087][ T9101] device bridge_slave_1 entered promiscuous mode [ 244.657950][ T9101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.681730][ T9101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.856882][ T9131] loop5: detected capacity change from 0 to 2048 [ 244.864378][ T9101] team0: Port device team_slave_0 added [ 244.881115][ T9101] team0: Port device team_slave_1 added [ 244.908767][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.976947][ T9131] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 244.983186][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.997977][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.001275][ T9131] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.026881][ T9101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.055677][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.104535][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.111543][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.144396][ T9101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.232847][ T4207] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.245025][ T9101] device hsr_slave_0 entered promiscuous mode [ 245.297939][ T9101] device hsr_slave_1 entered promiscuous mode [ 245.305370][ T9101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.359652][ T9101] Cannot create hsr debugfs directory [ 245.376157][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.591420][ T8996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.663184][ T4207] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.679120][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.703802][ T4207] usb 3-1: config 0 descriptor?? [ 245.770951][ T4207] cp210x 3-1:0.0: cp210x converter detected [ 245.808804][ T8996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.900244][ T8996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.993055][ T4207] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 246.010845][ T4207] cp210x 3-1:0.0: querying part number failed [ 246.041312][ T4207] usb 3-1: cp210x converter now attached to ttyUSB0 [ 246.042493][ T8996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.072842][ T9160] Bluetooth: hci1: command 0x0409 tx timeout [ 246.334649][ T9191] loop2: detected capacity change from 0 to 256 [ 246.374131][ T8996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.404946][ T8996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.417886][ T9191] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 246.473137][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 246.498362][ T8996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.545535][ T8996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.645998][ T9202] loop5: detected capacity change from 0 to 1024 [ 246.708946][ T9202] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 246.727507][ T9202] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.767499][ T9202] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 246.784999][ T9202] System zones: 0-1, 3-36 [ 246.812165][ T9202] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 246.946243][ T9202] EXT4-fs (loop5): shut down requested (2) [ 247.040263][ T9220] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 247.077349][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.133450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.145910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.166353][ T9101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.184187][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.192258][ T9101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.224475][ T9101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.256246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.277546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.297065][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.304243][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.320546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.337150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.350911][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.358100][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.380231][ T9101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.395927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.404772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.416092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.437523][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.462811][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.507598][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.533226][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.544123][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.591914][ T8996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.618957][ T8996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.691444][ T9240] loop9: detected capacity change from 0 to 512 [ 247.691561][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.724279][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.742613][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.762086][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.802509][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.866226][ T9240] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.886542][ T9240] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.934956][ T4244] usb 3-1: USB disconnect, device number 19 [ 247.960402][ T4244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.010055][ T4244] cp210x 3-1:0.0: device disconnected [ 248.132681][ T9101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.152908][ T9160] Bluetooth: hci1: command 0x041b tx timeout [ 248.207366][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.233279][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.271614][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.293517][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.326493][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.350990][ T9101] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.450317][ T154] device hsr_slave_0 left promiscuous mode [ 248.464696][ T154] device hsr_slave_1 left promiscuous mode [ 248.484060][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.523549][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.535649][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.553021][ T4653] Bluetooth: hci0: command 0x0419 tx timeout [ 248.590495][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.601278][ T154] device bridge_slave_1 left promiscuous mode [ 248.616118][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.663284][ T154] device bridge_slave_0 left promiscuous mode [ 248.673075][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.726681][ T154] device hsr_slave_0 left promiscuous mode [ 248.736547][ T154] device hsr_slave_1 left promiscuous mode [ 248.750513][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.752223][ T9279] Cannot find set identified by id 65534 to match [ 248.767180][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.783383][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.804607][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.819990][ T154] device bridge_slave_1 left promiscuous mode [ 248.831358][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.884177][ T154] device bridge_slave_0 left promiscuous mode [ 248.891531][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.909975][ T154] device veth1_macvtap left promiscuous mode [ 248.916526][ T154] device veth0_macvtap left promiscuous mode [ 248.922746][ T154] device veth1_vlan left promiscuous mode [ 248.928630][ T154] device veth0_vlan left promiscuous mode [ 248.957645][ T154] device veth1_macvtap left promiscuous mode [ 248.968186][ T154] device veth0_macvtap left promiscuous mode [ 248.981142][ T154] device veth1_vlan left promiscuous mode [ 248.994958][ T154] device veth0_vlan left promiscuous mode [ 249.171538][ T9295] loop9: detected capacity change from 0 to 1024 [ 249.250565][ T9295] hfsplus: bad catalog entry type [ 249.290279][ T4625] hfsplus: b-tree write err: -5, ino 4 [ 249.673298][ T154] team0 (unregistering): Port device team_slave_1 removed [ 249.688507][ T154] team0 (unregistering): Port device team_slave_0 removed [ 249.706897][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.722568][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.796969][ T154] bond0 (unregistering): Released all slaves [ 249.977772][ T9314] loop5: detected capacity change from 0 to 128 [ 249.989140][ T154] team0 (unregistering): Port device team_slave_1 removed [ 250.009625][ T154] team0 (unregistering): Port device team_slave_0 removed [ 250.044553][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.045739][ T9314] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.064771][ T9314] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.098138][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.231185][ T154] bond0 (unregistering): Released all slaves [ 250.237589][ T4653] Bluetooth: hci1: command 0x040f tx timeout [ 250.387339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.420501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.488506][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.495659][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.565371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.675036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.751082][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.758256][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.894638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.014930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.062976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.112050][ T9330] loop2: detected capacity change from 0 to 512 [ 251.745418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.775886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.802901][ T9330] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 251.829968][ T9101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.843165][ T9101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.868154][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.883743][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.898666][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.914119][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.967108][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.991625][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.027584][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.051214][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.071729][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.094331][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.122158][ T8996] device veth0_vlan entered promiscuous mode [ 252.137726][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.164867][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.196391][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.220220][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.251722][ T8996] device veth1_vlan entered promiscuous mode [ 252.313153][ T4653] Bluetooth: hci1: command 0x0419 tx timeout [ 252.347807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.364180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.398819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.429597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.458803][ T8996] device veth0_macvtap entered promiscuous mode [ 252.473004][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 252.493866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.510175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.537124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.562289][ T8996] device veth1_macvtap entered promiscuous mode [ 252.589071][ T9101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.630240][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.690725][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.733649][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.758644][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.780351][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.800823][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.839674][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.870633][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.931273][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.970125][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.983722][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.999514][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.868535][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.901073][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.939002][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.963269][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.992760][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.051790][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.092758][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.141448][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.183193][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.202746][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.232888][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.288337][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.308951][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.391667][ T8996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.409975][ T8996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.411339][ T9432] loop2: detected capacity change from 0 to 1024 [ 255.428768][ T8996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.449285][ T8996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.474478][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.489286][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.530517][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.536866][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.547467][ T9432] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,init_itable,lazytime,usrquota,errors=continue,data_err=abort,,errors=continue. Quota mode: writeback. [ 255.555835][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.670080][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.723015][ T9101] device veth0_vlan entered promiscuous mode [ 255.785093][ T9101] device veth1_vlan entered promiscuous mode [ 255.883878][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.925032][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.972206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.982181][ T4700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.013679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.051814][ T4700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.095709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.134794][ T9101] device veth0_macvtap entered promiscuous mode [ 256.183803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.202975][ T9101] device veth1_macvtap entered promiscuous mode [ 256.259668][ T4625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.291641][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.307542][ T4625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.331563][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.343142][ T9462] loop9: detected capacity change from 0 to 1024 [ 256.359358][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.390243][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.410749][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.445470][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.465835][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.487598][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.507816][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.523593][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.539682][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.551834][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.574470][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.592444][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.601873][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.602616][ T9462] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.634198][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.651253][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.662119][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.672924][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.683121][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.693625][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.703473][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.714135][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.724011][ T9101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.734498][ T9101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.763592][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.775383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.788624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.803007][ T9101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.812620][ T9101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.833346][ T9101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.842922][ T9101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.170563][ T9480] loop9: detected capacity change from 0 to 512 [ 257.264915][ T9480] EXT4-fs (loop9): bad geometry: first data block 1 is beyond end of filesystem (0) [ 257.364840][ T4513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.401816][ T4513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.468955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.511104][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.560257][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 257.622814][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.639896][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.110783][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.329498][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.515288][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.591789][ T9516] chnl_net:caif_netlink_parms(): no params data found [ 258.730084][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.778551][ T9534] loop9: detected capacity change from 0 to 512 [ 258.853731][ T9534] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 258.893309][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.900574][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.909640][ T9544] loop2: detected capacity change from 0 to 2048 [ 258.925223][ T9534] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1099: iget: bad i_size value: -67835469387268086 [ 258.948636][ T9516] device bridge_slave_0 entered promiscuous mode [ 258.951110][ T9534] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1099: couldn't read orphan inode 15 (err -117) [ 258.992258][ T9534] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.005128][ T9534] ext2 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.017556][ T9544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.025559][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.057449][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.066303][ T9516] device bridge_slave_1 entered promiscuous mode [ 259.154004][ T9516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.221460][ T9516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.401569][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.445418][ T9516] team0: Port device team_slave_0 added [ 259.483747][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.528833][ T9516] team0: Port device team_slave_1 added [ 259.661597][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.761712][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.775387][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.859385][ T9516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.896690][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.933520][ T9575] loop9: detected capacity change from 0 to 1024 [ 259.953869][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.963469][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.022183][ T9575] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.070517][ T9516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.119738][ T9539] chnl_net:caif_netlink_parms(): no params data found [ 260.376296][ T9516] device hsr_slave_0 entered promiscuous mode [ 260.393079][ T4208] Bluetooth: hci0: command 0x0409 tx timeout [ 260.396900][ T9516] device hsr_slave_1 entered promiscuous mode [ 260.407032][ T9516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.414859][ T9516] Cannot create hsr debugfs directory [ 260.619810][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.641002][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.664786][ T9539] device bridge_slave_0 entered promiscuous mode [ 260.711261][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.724482][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.755663][ T9539] device bridge_slave_1 entered promiscuous mode [ 260.832791][ T1324] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 260.872948][ T4211] Bluetooth: hci1: command 0x0409 tx timeout [ 260.880433][ T9539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.014120][ T9539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.116450][ T9539] team0: Port device team_slave_0 added [ 261.221069][ T9539] team0: Port device team_slave_1 added [ 261.273545][ T1324] usb 3-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 261.292417][ T1324] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 261.310902][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.399544][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.432479][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.475750][ T9539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.525448][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.549448][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.595608][ T9539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.623087][ T1324] usb 3-1: string descriptor 0 read error: -71 [ 261.692063][ T1324] usb 3-1: USB disconnect, device number 20 [ 261.733081][ T4211] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 261.781387][ T9539] device hsr_slave_0 entered promiscuous mode [ 261.804950][ T9539] device hsr_slave_1 entered promiscuous mode [ 261.814161][ T9539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.853078][ T9539] Cannot create hsr debugfs directory [ 261.964694][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.112945][ T4211] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.152590][ T4211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.172794][ T9652] Zero length message leads to an empty skb [ 262.194369][ T4211] usb 6-1: config 0 descriptor?? [ 262.237846][ T4211] cp210x 6-1:0.0: cp210x converter detected [ 262.268989][ T9516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.305358][ T9516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.379385][ T9516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.399436][ T9516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.472863][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 262.670412][ T9665] loop2: detected capacity change from 0 to 2048 [ 262.713138][ T9160] Bluetooth: hci2: command 0x0406 tx timeout [ 262.732985][ T4211] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 262.751504][ T9637] loop5: detected capacity change from 0 to 256 [ 262.870173][ T9516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.909338][ T9637] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 262.953045][ T9160] Bluetooth: hci1: command 0x041b tx timeout [ 262.971725][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.003036][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.051083][ T9516] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.053006][ T4211] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 263.088173][ T4211] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 263.193125][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.202665][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.299078][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.306311][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.351780][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.371822][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.390662][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.397878][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.536319][ T4211] usb 6-1: cp210x converter now attached to ttyUSB0 [ 263.881588][ T4211] usb 6-1: USB disconnect, device number 13 [ 263.903343][ T4211] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.921915][ T4211] cp210x 6-1:0.0: device disconnected [ 263.974536][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.988762][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.038479][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.102469][ T9539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.114637][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.138758][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.193974][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.214084][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.223722][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.233988][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.242357][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.257383][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.270543][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.284770][ T9539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.301801][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.322162][ T9539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.352525][ T154] device hsr_slave_0 left promiscuous mode [ 264.373534][ T154] device hsr_slave_1 left promiscuous mode [ 264.388821][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.404792][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.428344][ T9693] loop2: detected capacity change from 0 to 1024 [ 264.449752][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.464270][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.487183][ T154] device bridge_slave_1 left promiscuous mode [ 264.503023][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.515631][ T154] device bridge_slave_0 left promiscuous mode [ 264.529610][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.552835][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 264.558969][ T154] device hsr_slave_0 left promiscuous mode [ 264.567275][ T154] device hsr_slave_1 left promiscuous mode [ 264.581134][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.600182][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.635411][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.645486][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.653577][ T9693] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.762148][ T154] device bridge_slave_1 left promiscuous mode [ 264.796577][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.811986][ T154] device bridge_slave_0 left promiscuous mode [ 264.821193][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.911322][ T154] device veth1_macvtap left promiscuous mode [ 264.989715][ T154] device veth0_macvtap left promiscuous mode [ 264.997220][ T154] device veth1_vlan left promiscuous mode [ 265.008633][ T154] device veth0_vlan left promiscuous mode [ 265.037816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 265.047335][ T9160] Bluetooth: hci1: command 0x040f tx timeout [ 265.054411][ T154] device veth1_macvtap left promiscuous mode [ 265.060445][ T154] device veth0_macvtap left promiscuous mode [ 265.122658][ T9719] loop5: detected capacity change from 0 to 1024 [ 265.122894][ T154] device veth1_vlan left promiscuous mode [ 265.147981][ T154] device veth0_vlan left promiscuous mode [ 265.649894][ T154] team0 (unregistering): Port device team_slave_1 removed [ 265.665046][ T154] team0 (unregistering): Port device team_slave_0 removed [ 265.678102][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.691842][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.731375][ T9719] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,init_itable,lazytime,usrquota,errors=continue,data_err=abort,,errors=continue. Quota mode: writeback. [ 265.778016][ T9727] loop2: detected capacity change from 0 to 512 [ 265.815793][ T154] bond0 (unregistering): Released all slaves [ 265.870460][ T9719] 9pnet: Insufficient options for proto=fd [ 265.961965][ T9727] EXT4-fs (loop2): 1 orphan inode deleted [ 266.003361][ T9727] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 266.182968][ T9727] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.251378][ T9727] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 266.312023][ T9727] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 266.675441][ T154] team0 (unregistering): Port device team_slave_1 removed [ 266.713059][ T9160] Bluetooth: hci0: command 0x0419 tx timeout [ 266.757088][ T154] team0 (unregistering): Port device team_slave_0 removed [ 266.812793][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.877317][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.112927][ T9160] Bluetooth: hci1: command 0x0419 tx timeout [ 267.132804][ T4242] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 267.142553][ T154] bond0 (unregistering): Released all slaves [ 267.271912][ T9539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.372465][ T9746] loop5: detected capacity change from 0 to 1024 [ 267.503136][ T4242] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 267.523260][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.525767][ T9746] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.554175][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.556249][ T4242] usb 3-1: config 0 descriptor?? [ 267.561801][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.602078][ T9516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.618927][ T4242] cp210x 3-1:0.0: cp210x converter detected [ 267.643412][ T9539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.681034][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.709673][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.723756][ T9539] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.731563][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.744914][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.780127][ T9516] device veth0_vlan entered promiscuous mode [ 267.799984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.821688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.856233][ T9516] device veth1_vlan entered promiscuous mode [ 267.865634][ T9755] loop5: detected capacity change from 0 to 512 [ 267.892931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.901694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.910865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.920004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.928499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.937568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.950932][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.958072][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.985996][ T9516] device veth0_macvtap entered promiscuous mode [ 268.004265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.012677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.037113][ T9738] loop2: detected capacity change from 0 to 256 [ 268.043871][ T4242] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 268.045346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.071509][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.078875][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.098489][ T9738] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 268.105264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.127630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.140246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.162922][ T4242] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 268.170655][ T4242] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 268.173949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.197461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.200538][ T4242] usb 3-1: cp210x converter now attached to ttyUSB0 [ 268.213776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.223511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.236627][ T4242] usb 3-1: USB disconnect, device number 21 [ 268.243034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.254606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.273962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.281637][ T4242] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 268.302398][ T4242] cp210x 3-1:0.0: device disconnected [ 268.311380][ T9516] device veth1_macvtap entered promiscuous mode [ 268.326610][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.359979][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.390309][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.415072][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.428278][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.456134][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.490358][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.501976][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.513495][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.526994][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.537417][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.548844][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.560719][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.571663][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.622653][ T9516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.711840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.876532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.928533][ T9765] syz.5.1148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 269.031381][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.144318][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.155352][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.172792][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.190025][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.202448][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.244624][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.272084][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.284607][ T9516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.303915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.363463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.391362][ T9773] loop5: detected capacity change from 0 to 1024 [ 269.406757][ T9776] loop9: detected capacity change from 0 to 8 [ 269.443514][ T9516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.453419][ T9516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.462333][ T9516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.487004][ T9516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.824031][ T9776] SQUASHFS error: zlib decompression failed, data probably corrupt [ 269.883469][ T9776] SQUASHFS error: Failed to read block 0x4e8: -5 [ 269.911360][ T9776] SQUASHFS error: zlib decompression failed, data probably corrupt [ 269.915542][ T9773] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.943162][ T9776] SQUASHFS error: Failed to read block 0x4ee: -5 [ 269.961420][ T26] audit: type=1800 audit(1731680239.920:15): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1152" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 270.088474][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.137337][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.152903][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.160497][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.192153][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.228129][ T9539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.297250][ T4625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.310751][ T9786] loop9: detected capacity change from 0 to 764 [ 270.368654][ T4625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.377807][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.420879][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.430197][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.550257][ T9539] device veth0_vlan entered promiscuous mode [ 270.574034][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.583158][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.760707][ T9539] device veth1_vlan entered promiscuous mode [ 271.333184][ T9797] loop2: detected capacity change from 0 to 2048 [ 271.351549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.368014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.391876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.460326][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 271.521913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.552549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.585613][ T9539] device veth0_macvtap entered promiscuous mode [ 271.646077][ T9539] device veth1_macvtap entered promiscuous mode [ 271.712413][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.724531][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.734915][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.745706][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.756059][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.768129][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.778292][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.791671][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.802018][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.828837][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.848663][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.861480][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.870806][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.881428][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.906151][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.924657][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.946378][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.958617][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.969461][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.979638][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.991546][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.001862][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.015184][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.025465][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.036620][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.048375][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.058194][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.074359][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.093161][ T9539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.101889][ T9539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.115821][ T9539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.127669][ T9539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.256885][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.269084][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.297614][ T4625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.312003][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.324673][ T4625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.343169][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.343466][ T9817] chnl_net:caif_netlink_parms(): no params data found [ 273.463047][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.480936][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.489343][ T9817] device bridge_slave_0 entered promiscuous mode [ 273.499754][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.507391][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.516331][ T9817] device bridge_slave_1 entered promiscuous mode [ 273.593672][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.607310][ T9839] loop2: detected capacity change from 0 to 512 [ 273.635574][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.713572][ T9839] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 273.722196][ T9844] loop9: detected capacity change from 0 to 764 [ 273.779177][ T9817] team0: Port device team_slave_0 added [ 273.797872][ T9817] team0: Port device team_slave_1 added [ 273.808439][ T9844] rock: directory entry would overflow storage [ 273.842957][ T9844] rock: sig=0x4654, size=5, remaining=4 [ 273.989699][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.002582][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.021753][ T9855] loop2: detected capacity change from 0 to 1024 [ 274.090943][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.104638][ T9862] loop9: detected capacity change from 0 to 128 [ 274.130730][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.146869][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.174800][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.204529][ T9855] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.296446][ T9862] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.307818][ T9862] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.390968][ T26] audit: type=1326 audit(1731680244.350:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.466373][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.510187][ T26] audit: type=1326 audit(1731680244.350:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.579691][ T26] audit: type=1326 audit(1731680244.350:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.665370][ T26] audit: type=1326 audit(1731680244.350:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.690248][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.723085][ T26] audit: type=1326 audit(1731680244.350:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.746511][ T26] audit: type=1326 audit(1731680244.350:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.770604][ T26] audit: type=1326 audit(1731680244.350:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.820613][ T9817] device hsr_slave_0 entered promiscuous mode [ 274.826756][ T26] audit: type=1326 audit(1731680244.350:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.850992][ T9817] device hsr_slave_1 entered promiscuous mode [ 274.870714][ T9817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.898370][ T9817] Cannot create hsr debugfs directory [ 274.926289][ T26] audit: type=1326 audit(1731680244.350:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.968194][ T26] audit: type=1326 audit(1731680244.350:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 274.994895][ T26] audit: type=1326 audit(1731680244.350:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.017490][ T26] audit: type=1326 audit(1731680244.350:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.084581][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.160782][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.161385][ T26] audit: type=1326 audit(1731680244.350:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.206175][ T4208] Bluetooth: hci0: command 0x0409 tx timeout [ 275.218652][ T26] audit: type=1326 audit(1731680244.350:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.249045][ T9160] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 275.272303][ T26] audit: type=1326 audit(1731680244.350:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.308464][ T26] audit: type=1326 audit(1731680244.350:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.330962][ T26] audit: type=1326 audit(1731680244.350:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.354380][ T26] audit: type=1326 audit(1731680244.350:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.380162][ T26] audit: type=1326 audit(1731680244.350:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6b3ae719 code=0x7fc00000 [ 275.440382][ T9908] loop9: detected capacity change from 0 to 512 [ 275.519427][ T9908] EXT4-fs (loop9): bad geometry: first data block 1 is beyond end of filesystem (0) [ 275.562444][ T9913] loop5: detected capacity change from 0 to 128 [ 275.588915][ T9847] chnl_net:caif_netlink_parms(): no params data found [ 275.634028][ T9913] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.653484][ T9160] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 275.662831][ T9160] usb 3-1: config 0 has no interface number 0 [ 275.670810][ T9160] usb 3-1: New USB device found, idVendor=33f7, idProduct=0004, bcdDevice=19.50 [ 275.674258][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.685249][ T9160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.706360][ T9160] usb 3-1: config 0 descriptor?? [ 275.711994][ T9913] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 275.725283][ T9917] loop9: detected capacity change from 0 to 512 [ 275.803995][ T9917] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 275.835655][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.843032][ T9160] Bluetooth: hci1: command 0x0409 tx timeout [ 275.948163][ T9917] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 275.969749][ T9917] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.025674][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.051176][ T4242] usb 3-1: USB disconnect, device number 22 [ 276.110773][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.128907][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.158225][ T9847] device bridge_slave_0 entered promiscuous mode [ 276.179882][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.195545][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.206494][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.227072][ T9847] device bridge_slave_1 entered promiscuous mode [ 276.325205][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.382061][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.786632][ T9847] team0: Port device team_slave_0 added [ 277.246459][ T9847] team0: Port device team_slave_1 added [ 277.402713][ C0] sched: RT throttling activated [ 277.497407][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 277.553193][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.560391][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.590379][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.679799][ T9964] loop2: detected capacity change from 0 to 512 [ 277.692273][ T9965] loop5: detected capacity change from 0 to 1024 [ 277.746451][ T9965] EXT4-fs (loop5): Ignoring removed orlov option [ 277.783789][ T9965] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 277.806560][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.819668][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.842636][ T9964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.862220][ T9964] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.874861][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.912832][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 277.918799][ T9965] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 278.069243][ T9847] device hsr_slave_0 entered promiscuous mode [ 278.076050][ T4242] Bluetooth: hci4: command 0x0406 tx timeout [ 278.103782][ T9847] device hsr_slave_1 entered promiscuous mode [ 278.156947][ T9847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.168112][ T9847] Cannot create hsr debugfs directory [ 278.179689][ T9986] netlink: 'syz.9.1195': attribute type 4 has an invalid length. [ 278.329964][ T9993] loop2: detected capacity change from 0 to 512 [ 278.438033][ T9993] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 278.482349][ T9999] loop9: detected capacity change from 0 to 512 [ 278.558171][ T9999] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 278.584074][ T9999] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 278.629894][ T9999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 278.661376][ T9999] System zones: 1-12 [ 278.687127][ T9999] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.1199: corrupted in-inode xattr [ 278.713301][ T9999] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1199: couldn't read orphan inode 15 (err -117) [ 278.789473][ T9999] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 278.893928][ T9999] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 13: comm syz.9.1199: bad entry in directory: directory entry overrun - offset=128, inode=18, rec_len=896, size=1012 fake=0 [ 278.958156][ T9817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.983873][ T9817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.033104][ T9864] EXT4-fs error (device loop9): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 279.062465][ T9817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.084885][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.101077][ T9817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.156648][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 279.221635][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.280044][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 279.383721][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.409736][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 279.456213][T10034] bridge0: port 3(gretap0) entered blocking state [ 279.463482][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.492902][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072 [ 279.512851][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 279.523373][T10034] bridge0: port 3(gretap0) entered disabled state [ 279.530626][T10036] loop5: detected capacity change from 0 to 1024 [ 279.540974][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.550643][T10034] device gretap0 entered promiscuous mode [ 279.567672][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 4096 [ 279.592359][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.603892][T10034] bridge0: port 3(gretap0) entered blocking state [ 279.615082][T10034] bridge0: port 3(gretap0) entered forwarding state [ 279.622883][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 5120 [ 279.640080][T10036] EXT4-fs (loop5): Ignoring removed orlov option [ 279.656879][T10036] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 279.684132][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.706065][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 6144 [ 279.721677][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.738407][ T5934] EXT4-fs error (device loop9): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 7168 [ 279.769235][ T9847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.779746][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.784579][T10036] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,sysvgroups,block_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 279.808503][ T5934] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 279.838331][ T9847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.899601][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.920262][ T9847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.976534][ T9847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.992821][ T4209] Bluetooth: hci1: command 0x040f tx timeout [ 280.018424][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.037061][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.168912][ T9817] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.223821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.257208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.283663][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.290761][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.300066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.353486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.376510][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.383782][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.427705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.451983][T10054] loop5: detected capacity change from 0 to 1024 [ 280.584947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.623845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.633315][T10054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.675426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.690846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.700233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.740367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.750750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.764190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.775068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.791270][ T9817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.826615][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.864664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.874813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.045130][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.131674][ T154] device hsr_slave_0 left promiscuous mode [ 281.177798][ T154] device hsr_slave_1 left promiscuous mode [ 281.212939][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.220614][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.273545][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.281017][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.320160][ T154] device bridge_slave_1 left promiscuous mode [ 281.326891][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.367722][ T154] device bridge_slave_0 left promiscuous mode [ 281.376145][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.427771][ T154] device hsr_slave_0 left promiscuous mode [ 281.432210][T10075] loop5: detected capacity change from 0 to 1024 [ 281.442099][ T154] device hsr_slave_1 left promiscuous mode [ 281.474456][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.493122][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.501158][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.509346][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.519456][ T154] device bridge_slave_1 left promiscuous mode [ 281.529799][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.539030][ T154] device bridge_slave_0 left promiscuous mode [ 281.545712][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.568647][ T154] device veth1_macvtap left promiscuous mode [ 281.577718][ T154] device veth0_macvtap left promiscuous mode [ 281.592924][ T154] device veth1_vlan left promiscuous mode [ 281.598987][ T154] device veth0_vlan left promiscuous mode [ 281.599447][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 281.619334][ T154] device veth1_macvtap left promiscuous mode [ 281.631145][ T154] device veth0_macvtap left promiscuous mode [ 281.642324][ T154] device veth1_vlan left promiscuous mode [ 281.653404][ T154] device veth0_vlan left promiscuous mode [ 281.822897][ T4216] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 282.048396][ T154] team0 (unregistering): Port device team_slave_1 removed [ 282.066919][ T154] team0 (unregistering): Port device team_slave_0 removed [ 282.073095][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 282.081037][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.098210][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.169575][ T154] bond0 (unregistering): Released all slaves [ 282.183096][ T4216] usb 6-1: config 0 has an invalid interface number: 97 but max is 0 [ 282.191583][ T4216] usb 6-1: config 0 has no interface number 0 [ 282.197959][ T4216] usb 6-1: too many endpoints for config 0 interface 97 altsetting 8: 187, using maximum allowed: 30 [ 282.209101][ T4216] usb 6-1: config 0 interface 97 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 282.222338][ T4216] usb 6-1: config 0 interface 97 has no altsetting 0 [ 282.229109][ T4216] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 282.239648][ T4216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.253807][ T4216] usb 6-1: config 0 descriptor?? [ 282.332259][ T154] team0 (unregistering): Port device team_slave_1 removed [ 282.347200][ T154] team0 (unregistering): Port device team_slave_0 removed [ 282.364558][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.381484][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.456456][ T154] bond0 (unregistering): Released all slaves [ 282.519217][ T9847] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.625590][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.643006][ T4216] usb 6-1: string descriptor 0 read error: -71 [ 282.651601][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.659320][ T4216] cp210x 6-1:0.97: cp210x converter detected [ 282.687610][ T4216] cp210x 6-1:0.97: failed to get vendor val 0x370b size 1: -71 [ 282.698141][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.717971][ T4216] cp210x 6-1:0.97: querying part number failed [ 282.725426][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.747248][ T4216] usb 6-1: cp210x converter now attached to ttyUSB0 [ 282.755401][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.762531][ T4625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.781524][ T4216] usb 6-1: USB disconnect, device number 14 [ 282.824688][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.832663][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.851109][ T4216] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.877570][ T4216] cp210x 6-1:0.97: device disconnected [ 282.886038][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.944221][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.951348][ T4625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.003224][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.046813][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.056248][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.076589][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.115485][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.147275][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 283.147293][ T26] audit: type=1326 audit(1731680253.110:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.2.1222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a91c6b719 code=0x0 [ 283.190895][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.207068][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.271812][ T4625] hfsplus: b-tree write err: -5, ino 4 [ 283.284291][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.398279][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.417057][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.426534][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.445537][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.470356][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.492122][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.502854][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.511529][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.549068][ T9817] device veth0_vlan entered promiscuous mode [ 283.571265][ T9847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.961200][T10117] loop5: detected capacity change from 0 to 2048 [ 284.184105][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.205950][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.296941][T10117] loop5: p1 < > p3 < > p4 < > [ 284.301776][T10117] loop5: partition table partially beyond EOD, truncated [ 284.311846][T10117] loop5: p3 start 4284289 is beyond EOD, truncated [ 284.382597][ T9817] device veth1_vlan entered promiscuous mode [ 284.497926][ T9817] device veth0_macvtap entered promiscuous mode [ 284.554458][ T9817] device veth1_macvtap entered promiscuous mode [ 284.636533][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.698345][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.740538][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.788802][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.832937][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.875576][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.926279][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.967588][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.013125][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.054704][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.102939][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.139704][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.159433][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.211840][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.222342][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.262363][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.282885][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.304292][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.318031][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.327642][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.343561][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.374909][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.393624][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.413492][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.422366][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.439998][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.463688][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.505367][ T9817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.542807][ T9817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.551546][ T9817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.556277][ T9160] Bluetooth: hci3: command 0x0409 tx timeout [ 285.612948][ T9817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.647358][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.726024][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.768320][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.857249][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.959830][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.973625][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.029418][ T9847] device veth0_vlan entered promiscuous mode [ 286.058610][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.076903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.097908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.113200][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.119073][T10151] loop2: detected capacity change from 0 to 512 [ 286.128570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.154373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.188574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.255649][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.284484][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.305889][T10151] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 286.308250][ T9847] device veth1_vlan entered promiscuous mode [ 286.340113][T10151] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.353910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.369796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.572912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.581635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.676077][ T9847] device veth0_macvtap entered promiscuous mode [ 286.803165][T10110] chnl_net:caif_netlink_parms(): no params data found [ 286.824141][ T9847] device veth1_macvtap entered promiscuous mode [ 286.880143][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.912827][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.932767][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.952016][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.975251][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.993473][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.031674][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.062782][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.072646][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.121275][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.153456][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.209471][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.237712][T10180] loop2: detected capacity change from 0 to 128 [ 287.243701][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.272236][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.339687][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.381683][T10180] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.382208][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.486966][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.513233][T10180] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.572739][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.593375][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 287.612508][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.642747][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.662295][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.678707][T10193] loop5: detected capacity change from 0 to 512 [ 287.680828][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.708679][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.722375][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.741718][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.764850][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.802861][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.811691][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.865568][ T9847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.895498][T10193] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 287.927526][ T9847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.952906][T10193] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.976063][ T9847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.031358][ T9847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.283103][T10110] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.293262][T10110] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.526671][T10110] device bridge_slave_0 entered promiscuous mode [ 288.593892][T10110] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.641753][T10110] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.683054][T10110] device bridge_slave_1 entered promiscuous mode [ 288.785127][T10110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.876068][T10110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.058444][T10110] team0: Port device team_slave_0 added [ 289.077886][T10110] team0: Port device team_slave_1 added [ 289.227292][T10110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.252963][T10110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.320899][T10110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.374021][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.394191][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.450701][T10110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.464538][T10110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.509487][T10110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.583734][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.635637][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.654657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.673887][ T4244] Bluetooth: hci3: command 0x040f tx timeout [ 289.779419][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.859981][T10222] device syzkaller0 entered promiscuous mode [ 289.877883][T10110] device hsr_slave_0 entered promiscuous mode [ 289.951824][T10110] device hsr_slave_1 entered promiscuous mode [ 290.020931][T10110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.036865][T10110] Cannot create hsr debugfs directory [ 290.284368][ T4212] kernel write not supported for file /snd/seq (pid: 4212 comm: kworker/1:6) [ 290.844139][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.015278][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.040770][T10224] chnl_net:caif_netlink_parms(): no params data found [ 291.157539][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.341825][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.359760][T10285] loop5: detected capacity change from 0 to 1024 [ 291.386202][T10286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 291.455539][T10285] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,init_itable,lazytime,usrquota,errors=continue,data_err=abort,,errors=continue. Quota mode: writeback. [ 291.572605][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.583525][T10224] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.591800][T10224] device bridge_slave_0 entered promiscuous mode [ 291.622531][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.634525][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.656067][T10224] device bridge_slave_1 entered promiscuous mode [ 291.733040][ T5940] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 291.752926][ T4216] Bluetooth: hci3: command 0x0419 tx timeout [ 291.776207][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.798872][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.845268][ T4212] Bluetooth: hci0: command 0x0409 tx timeout [ 291.934948][T10224] team0: Port device team_slave_0 added [ 291.973333][T10224] team0: Port device team_slave_1 added [ 292.127684][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.141546][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.198275][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.222404][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.229860][ T5940] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 292.236325][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.266204][ T5940] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 292.292258][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.313514][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.335127][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.397753][ T5940] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 292.525372][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.575429][T10224] device hsr_slave_0 entered promiscuous mode [ 292.588585][ T23] usb 3-1: USB disconnect, device number 23 [ 292.595360][T10224] device hsr_slave_1 entered promiscuous mode [ 292.607724][T10224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.615641][T10224] Cannot create hsr debugfs directory [ 292.668598][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.737225][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.814995][T10290] chnl_net:caif_netlink_parms(): no params data found [ 292.999027][ T154] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.028660][ T4178] Bluetooth: hci4: Unknown advertising packet type: 0x735f [ 293.028964][ T4178] ================================================================== [ 293.044784][ T4178] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11bf/0x3f50 [ 293.052623][ T4178] Read of size 1 at addr ffff88806210f400 by task kworker/u5:4/4178 [ 293.060619][ T4178] [ 293.062965][ T4178] CPU: 1 PID: 4178 Comm: kworker/u5:4 Not tainted 5.15.172-syzkaller #0 [ 293.071490][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.081747][ T4178] Workqueue: hci4 hci_rx_work [ 293.086825][ T4178] Call Trace: [ 293.090112][ T4178] [ 293.093053][ T4178] dump_stack_lvl+0x1e3/0x2d0 [ 293.097739][ T4178] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 293.103462][ T4178] ? _printk+0xd1/0x120 [ 293.107625][ T4178] ? __wake_up_klogd+0xcc/0x100 [ 293.112472][ T4178] ? panic+0x860/0x860 [ 293.116537][ T4178] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 293.121999][ T4178] print_address_description+0x63/0x3b0 [ 293.127698][ T4178] ? hci_le_meta_evt+0x11bf/0x3f50 [ 293.133182][ T4178] kasan_report+0x16b/0x1c0 [ 293.137703][ T4178] ? hci_le_meta_evt+0x11bf/0x3f50 [ 293.142841][ T4178] hci_le_meta_evt+0x11bf/0x3f50 [ 293.147783][ T4178] ? __lock_acquire+0x1ff0/0x1ff0 [ 293.152826][ T4178] ? hci_remote_host_features_evt+0x280/0x280 [ 293.158891][ T4178] ? __mutex_unlock_slowpath+0x218/0x750 [ 293.164520][ T4178] ? hci_event_packet+0x3b4/0x1550 [ 293.169638][ T4178] ? mutex_unlock+0x10/0x10 [ 293.174173][ T4178] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 293.180154][ T4178] ? print_irqtrace_events+0x210/0x210 [ 293.185634][ T4178] hci_event_packet+0xc41/0x1550 [ 293.190581][ T4178] ? rcu_lock_release+0x20/0x20 [ 293.195438][ T4178] ? hci_send_to_monitor+0x99/0x4d0 [ 293.200636][ T4178] hci_rx_work+0x232/0x990 [ 293.205060][ T4178] process_one_work+0x8a1/0x10c0 [ 293.210019][ T4178] ? worker_detach_from_pool+0x260/0x260 [ 293.215656][ T4178] ? _raw_spin_lock_irqsave+0x120/0x120 [ 293.221199][ T4178] ? kthread_data+0x4e/0xc0 [ 293.225699][ T4178] ? wq_worker_running+0x97/0x170 [ 293.230723][ T4178] worker_thread+0xaca/0x1280 [ 293.235421][ T4178] kthread+0x3f6/0x4f0 [ 293.239504][ T4178] ? rcu_lock_release+0x20/0x20 [ 293.244371][ T4178] ? kthread_blkcg+0xd0/0xd0 [ 293.248982][ T4178] ret_from_fork+0x1f/0x30 [ 293.253409][ T4178] [ 293.256423][ T4178] [ 293.258750][ T4178] Allocated by task 10368: [ 293.263160][ T4178] ____kasan_kmalloc+0xba/0xf0 [ 293.267949][ T4178] __kmalloc_node_track_caller+0x195/0x390 [ 293.273754][ T4178] __alloc_skb+0x12c/0x590 [ 293.278173][ T4178] vhci_write+0xbc/0x430 [ 293.282421][ T4178] vfs_write+0xacd/0xe50 [ 293.286656][ T4178] ksys_write+0x1a2/0x2c0 [ 293.291079][ T4178] do_syscall_64+0x3b/0xb0 [ 293.295512][ T4178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.301504][ T4178] [ 293.303826][ T4178] Last potentially related work creation: [ 293.309535][ T4178] kasan_save_stack+0x36/0x60 [ 293.314325][ T4178] kasan_record_aux_stack+0xba/0x100 [ 293.319616][ T4178] kvfree_call_rcu+0x118/0x8a0 [ 293.324386][ T4178] neigh_flush_dev+0x189/0x9e0 [ 293.329145][ T4178] __neigh_ifdown+0x45/0x3b0 [ 293.333817][ T4178] neigh_ifdown+0x1b/0x30 [ 293.338154][ T4178] rt6_disable_ip+0x628/0x6c0 [ 293.343102][ T4178] addrconf_ifdown+0x161/0x1bb0 [ 293.347993][ T4178] addrconf_notify+0x432/0xf30 [ 293.352757][ T4178] raw_notifier_call_chain+0xd0/0x170 [ 293.358157][ T4178] dev_close_many+0x37c/0x530 [ 293.362926][ T4178] unregister_netdevice_many+0x4b0/0x18f0 [ 293.368644][ T4178] default_device_exit_batch+0x390/0x3f0 [ 293.374358][ T4178] cleanup_net+0x763/0xb60 [ 293.378773][ T4178] process_one_work+0x8a1/0x10c0 [ 293.383705][ T4178] worker_thread+0xaca/0x1280 [ 293.388376][ T4178] kthread+0x3f6/0x4f0 [ 293.392444][ T4178] ret_from_fork+0x1f/0x30 [ 293.396856][ T4178] [ 293.399172][ T4178] Second to last potentially related work creation: [ 293.405747][ T4178] kasan_save_stack+0x36/0x60 [ 293.410426][ T4178] kasan_record_aux_stack+0xba/0x100 [ 293.415705][ T4178] kvfree_call_rcu+0x118/0x8a0 [ 293.420551][ T4178] drop_sysctl_table+0x317/0x460 [ 293.425502][ T4178] unregister_sysctl_table+0x88/0x130 [ 293.430886][ T4178] neigh_sysctl_unregister+0x74/0x90 [ 293.436175][ T4178] inetdev_event+0x814/0x1490 [ 293.440851][ T4178] raw_notifier_call_chain+0xd0/0x170 [ 293.446275][ T4178] unregister_netdevice_many+0xf1b/0x18f0 [ 293.452179][ T4178] default_device_exit_batch+0x390/0x3f0 [ 293.457902][ T4178] cleanup_net+0x763/0xb60 [ 293.462330][ T4178] process_one_work+0x8a1/0x10c0 [ 293.467577][ T4178] worker_thread+0xaca/0x1280 [ 293.472315][ T4178] kthread+0x3f6/0x4f0 [ 293.476420][ T4178] ret_from_fork+0x1f/0x30 [ 293.480832][ T4178] [ 293.483161][ T4178] The buggy address belongs to the object at ffff88806210f000 [ 293.483161][ T4178] which belongs to the cache kmalloc-1k of size 1024 [ 293.497299][ T4178] The buggy address is located 0 bytes to the right of [ 293.497299][ T4178] 1024-byte region [ffff88806210f000, ffff88806210f400) [ 293.511004][ T4178] The buggy address belongs to the page: [ 293.516720][ T4178] page:ffffea0001884200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62108 [ 293.527283][ T4178] head:ffffea0001884200 order:3 compound_mapcount:0 compound_pincount:0 [ 293.535638][ T4178] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 293.543740][ T4178] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017041dc0 [ 293.552331][ T4178] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 293.561531][ T4178] page dumped because: kasan: bad access detected [ 293.568084][ T4178] page_owner tracks the page as allocated [ 293.573809][ T4178] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4166, ts 63881580836, free_ts 17571778468 [ 293.592736][ T4178] get_page_from_freelist+0x3b78/0x3d40 [ 293.598288][ T4178] __alloc_pages+0x272/0x700 [ 293.602971][ T4178] new_slab+0xbb/0x4b0 [ 293.607038][ T4178] ___slab_alloc+0x6f6/0xe10 [ 293.611621][ T4178] __kmalloc_node_track_caller+0x1f6/0x390 [ 293.617422][ T4178] __alloc_skb+0x12c/0x590 [ 293.621832][ T4178] inet6_rt_notify+0xdc/0x280 [ 293.626530][ T4178] fib6_add+0x1db2/0x3c80 [ 293.630960][ T4178] ip6_route_add+0x84/0x120 [ 293.635483][ T4178] addrconf_permanent_addr+0x7da/0xc70 [ 293.641038][ T4178] addrconf_notify+0x837/0xf30 [ 293.645819][ T4178] raw_notifier_call_chain+0xd0/0x170 [ 293.651190][ T4178] __dev_notify_flags+0x304/0x610 [ 293.656214][ T4178] dev_change_flags+0xe7/0x190 [ 293.660981][ T4178] do_setlink+0xc21/0x3d80 [ 293.665396][ T4178] rtnl_newlink+0x17d6/0x2070 [ 293.670073][ T4178] page last free stack trace: [ 293.674737][ T4178] free_unref_page_prepare+0xc34/0xcf0 [ 293.680199][ T4178] free_unref_page+0x95/0x2d0 [ 293.684870][ T4178] free_contig_range+0x95/0xf0 [ 293.689626][ T4178] destroy_args+0xfe/0x980 [ 293.694036][ T4178] debug_vm_pgtable+0x40d/0x470 [ 293.698879][ T4178] do_one_initcall+0x22b/0x7a0 [ 293.703637][ T4178] do_initcall_level+0x157/0x210 [ 293.708570][ T4178] do_initcalls+0x49/0x90 [ 293.712892][ T4178] kernel_init_freeable+0x425/0x5c0 [ 293.718198][ T4178] kernel_init+0x19/0x290 [ 293.722525][ T4178] ret_from_fork+0x1f/0x30 [ 293.727120][ T4178] [ 293.729438][ T4178] Memory state around the buggy address: [ 293.735153][ T4178] ffff88806210f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 293.743208][ T4178] ffff88806210f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 293.751259][ T4178] >ffff88806210f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.759308][ T4178] ^ [ 293.763367][ T4178] ffff88806210f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.771429][ T4178] ffff88806210f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.779479][ T4178] ================================================================== [ 293.787616][ T4178] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 293.798130][ T4212] Bluetooth: hci1: command 0x0409 tx timeout [ 293.816176][ T4178] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 293.823489][ T4178] CPU: 1 PID: 4178 Comm: kworker/u5:4 Tainted: G B 5.15.172-syzkaller #0 [ 293.833326][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.843513][ T4178] Workqueue: hci4 hci_rx_work [ 293.848308][ T4178] Call Trace: [ 293.851597][ T4178] [ 293.854537][ T4178] dump_stack_lvl+0x1e3/0x2d0 [ 293.859246][ T4178] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 293.864898][ T4178] ? panic+0x860/0x860 [ 293.869077][ T4178] ? rcu_is_watching+0x11/0xa0 [ 293.873864][ T4178] ? preempt_schedule_common+0xa6/0xd0 [ 293.879356][ T4178] panic+0x318/0x860 [ 293.883283][ T4178] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 293.889568][ T4178] ? check_panic_on_warn+0x1d/0xa0 [ 293.894709][ T4178] ? fb_is_primary_device+0xd0/0xd0 [ 293.899935][ T4178] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 293.905938][ T4178] ? _raw_spin_unlock+0x40/0x40 [ 293.910949][ T4178] check_panic_on_warn+0x7e/0xa0 [ 293.915909][ T4178] ? hci_le_meta_evt+0x11bf/0x3f50 [ 293.921043][ T4178] end_report+0x6d/0xf0 [ 293.925246][ T4178] kasan_report+0x18e/0x1c0 [ 293.929766][ T4178] ? hci_le_meta_evt+0x11bf/0x3f50 [ 293.934904][ T4178] hci_le_meta_evt+0x11bf/0x3f50 [ 293.939862][ T4178] ? __lock_acquire+0x1ff0/0x1ff0 [ 293.944913][ T4178] ? hci_remote_host_features_evt+0x280/0x280 [ 293.951001][ T4178] ? __mutex_unlock_slowpath+0x218/0x750 [ 293.956740][ T4178] ? hci_event_packet+0x3b4/0x1550 [ 293.962095][ T4178] ? mutex_unlock+0x10/0x10 [ 293.966601][ T4178] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 293.972721][ T4178] ? print_irqtrace_events+0x210/0x210 [ 293.978294][ T4178] hci_event_packet+0xc41/0x1550 [ 293.983292][ T4178] ? rcu_lock_release+0x20/0x20 [ 293.988200][ T4178] ? hci_send_to_monitor+0x99/0x4d0 [ 293.993410][ T4178] hci_rx_work+0x232/0x990 [ 293.997868][ T4178] process_one_work+0x8a1/0x10c0 [ 294.002842][ T4178] ? worker_detach_from_pool+0x260/0x260 [ 294.008496][ T4178] ? _raw_spin_lock_irqsave+0x120/0x120 [ 294.014080][ T4178] ? kthread_data+0x4e/0xc0 [ 294.018719][ T4178] ? wq_worker_running+0x97/0x170 [ 294.023747][ T4178] worker_thread+0xaca/0x1280 [ 294.028462][ T4178] kthread+0x3f6/0x4f0 [ 294.032525][ T4178] ? rcu_lock_release+0x20/0x20 [ 294.037406][ T4178] ? kthread_blkcg+0xd0/0xd0 [ 294.042006][ T4178] ret_from_fork+0x1f/0x30 [ 294.046425][ T4178] [ 294.049694][ T4178] Kernel Offset: disabled [ 294.054020][ T4178] Rebooting in 86400 seconds..