last executing test programs: 1m29.546919505s ago: executing program 3 (id=4): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}]}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 1m27.358676796s ago: executing program 3 (id=24): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYBLOB="200000008d"], 0x58}}, 0x0) 1m27.055550695s ago: executing program 3 (id=26): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) write$binfmt_misc(r1, &(0x7f0000000200), 0xfffffecc) 1m25.829521586s ago: executing program 3 (id=38): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x89) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1m24.510358291s ago: executing program 3 (id=48): syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x8f02) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x68}}, 0x20040000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m24.202459042s ago: executing program 5 (id=53): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 1m23.996303032s ago: executing program 5 (id=55): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.86847528s ago: executing program 5 (id=57): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.800288167s ago: executing program 3 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r6, 0x10, 0x1070bd2c, 0x4, {0x5}}, 0x14}}, 0x20004034) close(r3) 1m22.77497906s ago: executing program 5 (id=60): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x89) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1m22.013928916s ago: executing program 32 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r6, 0x10, 0x1070bd2c, 0x4, {0x5}}, 0x14}}, 0x20004034) close(r3) 1m21.931527475s ago: executing program 5 (id=65): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xfff8, 0xf}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x44}}, 0x0) mq_open(&(0x7f00000006c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1cQ\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8x\xa2\xe46\"\xbc\xbe\x10\xe5xI:\x11wh\xebM\xa8H3\xa4^\xd2\xcc:\xaf\xb8\xf0Dkh/\xc5\x83o)\x0etyy\x818\xd6z\xdc4\xb45C\x164\xbf \xea\f\x049Z\xa5&F\xf3^@\xae0\xe4q@\x8c|IJ\x89L\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000480)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.879139448s ago: executing program 5 (id=72): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r1, 0xfb59b128081ca7fb}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) 1m20.798039436s ago: executing program 2 (id=73): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.350385597s ago: executing program 33 (id=72): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r1, 0xfb59b128081ca7fb}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) 1m19.814224024s ago: executing program 2 (id=77): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x89) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) 1m18.736187394s ago: executing program 2 (id=84): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m17.352264849s ago: executing program 2 (id=98): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x89) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) 1m16.28394938s ago: executing program 2 (id=106): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3]}, 0x8) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0x2, 0x0, 0xfffffffc, 0x30}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.524295361s ago: executing program 2 (id=115): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x200000000000011, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 1m14.089939723s ago: executing program 34 (id=115): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x200000000000011, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 1m10.054680088s ago: executing program 4 (id=144): unshare(0x2040400) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x1, 0xc17, &(0x7f0000000800)="$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") symlink(0x0, &(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000300)='./file0\x00', 0x622000, 0x0) fstat(r0, 0x0) 1m9.476189035s ago: executing program 4 (id=150): socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0xfffffffd}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "f1"}}]}, 0x13c}}, 0x0) 1m9.169984806s ago: executing program 4 (id=153): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffd) 1m8.820332651s ago: executing program 4 (id=154): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x30000, 0x0, 0x41, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/97, 0x61) 1m8.225130356s ago: executing program 4 (id=156): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) pwrite64(r0, &(0x7f0000000300)='_', 0x10000000, 0x10000000005) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) 1m7.6990535s ago: executing program 4 (id=159): syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x8f02) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1m7.133105599s ago: executing program 35 (id=159): syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x8f02) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 23.784279538s ago: executing program 8 (id=418): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x4}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000002b800000000000000080005000d00", 0x22) 23.62776698s ago: executing program 8 (id=420): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0xa, 0x3}) 23.192279132s ago: executing program 8 (id=423): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.225503536s ago: executing program 8 (id=444): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x89) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 18.237129234s ago: executing program 8 (id=453): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) 16.970693437s ago: executing program 8 (id=464): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x4}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000002b800000000000000080005000d0000", 0x23) 16.610174938s ago: executing program 36 (id=464): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x4}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000002b800000000000000080005000d0000", 0x23) 7.955473591s ago: executing program 9 (id=497): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x55}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf9, 0x1, 0x40}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0x4, 0xb, 0x9, 0x20, 0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x42b}}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sendfile(r1, r1, &(0x7f0000001140)=0x80000001, 0x4) fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1) 7.320864829s ago: executing program 0 (id=501): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 6.428386849s ago: executing program 7 (id=503): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) 6.159864028s ago: executing program 1 (id=505): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 5.822177919s ago: executing program 0 (id=507): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77c, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x1f00) read$FUSE(r0, &(0x7f0000001f00)={0x2020}, 0x2020) 5.821120034s ago: executing program 1 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x4, 0xc8, 0x1}}, 0x1c}}, 0x0) 5.498247199s ago: executing program 9 (id=509): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") r0 = open(0x0, 0x62142, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) pwrite64(r0, &(0x7f0000000300)='_', 0x10000000, 0x10000000005) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) 5.234282688s ago: executing program 7 (id=510): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc401020301090212"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@allow_utime={'allow_utime', 0x3d, 0x401}}, {}, {@discard}]}, 0x81, 0x14f5, &(0x7f0000001580)="$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") vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfffffffffffffcb0}], 0xf, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 5.112111905s ago: executing program 0 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x6, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) 5.060852899s ago: executing program 9 (id=512): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 4.713795487s ago: executing program 6 (id=513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x54, 0x30, 0x1, 0x0, 0x0, {}, [{0x40, 0x1, [@m_tunnel_key={0x3c, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffffc8, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.068343025s ago: executing program 1 (id=514): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.042789191s ago: executing program 9 (id=515): socket(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x10, 0x0, @time={0x1, 0x2}, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @tick, {0x6}, {}, @time=@time={0x4, 0x5}}], 0x38) syz_io_uring_setup(0xd2, &(0x7f0000000480), 0x0, 0x0) unshare(0x22020600) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.974357315s ago: executing program 0 (id=516): syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') 2.636493253s ago: executing program 6 (id=517): ioperm(0x0, 0x33, 0x3) fsopen(0x0, 0x300) 1.85164144s ago: executing program 1 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.79607267s ago: executing program 6 (id=519): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 1.690368047s ago: executing program 0 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c040) 1.68472476s ago: executing program 9 (id=521): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) 1.670483104s ago: executing program 7 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001200431b0000000000000000117c200d", @ANYRES32=0x0, @ANYBLOB="0000000000000000040036"], 0x24}}, 0x0) 1.528369992s ago: executing program 1 (id=523): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") r0 = open(0x0, 0x62142, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) pwrite64(r0, &(0x7f0000000300)='_', 0x10000000, 0x10000000005) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) 1.294295765s ago: executing program 6 (id=524): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.263848193s ago: executing program 0 (id=525): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x75, 0x5e, 0x75, 0x40, 0x9022, 0xd484, 0xcd35, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x25, 0x7f, 0x36}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.027182287s ago: executing program 7 (id=526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000015000000000000170000400000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) 952.104615ms ago: executing program 6 (id=527): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x0) 811.027463ms ago: executing program 7 (id=528): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) write$P9_RMKDIR(r0, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x20, 0x2, 0x2}}, 0x14) 792.743182ms ago: executing program 9 (id=529): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) write$binfmt_misc(r2, &(0x7f0000000200), 0xfffffecc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 684.819797ms ago: executing program 6 (id=530): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@test_dummy_encryption}, {@test_dummy_encryption}, {@noauto_da_alloc}, {@minixdf}, {@errors_remount}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 683.981584ms ago: executing program 1 (id=531): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[], 0x5, 0xa68, &(0x7f0000001b40)="$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") r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x1000, 0x2006fc) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x2) 0s ago: executing program 7 (id=532): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): named from eth0 [ 76.020822][ T5864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.046914][ T5864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.057321][ T5864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.074455][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.098015][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.139700][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.180565][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.188032][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.217679][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.264501][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.271750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.283344][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.290511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.317616][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.324897][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.363850][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.390066][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.397203][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.446529][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.453759][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.475034][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.526583][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.578546][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.619693][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.633054][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.640201][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.684476][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.691626][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.759214][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.790926][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.823702][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.830858][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.845479][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.876407][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.890433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.897583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.042994][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.056951][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.068845][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.142924][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.150155][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.176357][ T5849] veth0_vlan: entered promiscuous mode [ 77.199135][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.206388][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.265903][ T5849] veth1_vlan: entered promiscuous mode [ 77.456767][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.481813][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.540115][ T5849] veth0_macvtap: entered promiscuous mode [ 77.619735][ T5849] veth1_macvtap: entered promiscuous mode [ 77.677037][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.736970][ T5845] veth0_vlan: entered promiscuous mode [ 77.749927][ T5852] veth0_vlan: entered promiscuous mode [ 77.790345][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.807466][ T5845] veth1_vlan: entered promiscuous mode [ 77.836346][ T5852] veth1_vlan: entered promiscuous mode [ 77.851828][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.860845][ T5847] veth0_vlan: entered promiscuous mode [ 77.872844][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882563][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.892155][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.901022][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.910139][ T5853] Bluetooth: hci3: command tx timeout [ 77.910198][ T5853] Bluetooth: hci4: command tx timeout [ 77.918427][ T5853] Bluetooth: hci1: command tx timeout [ 77.973860][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.983516][ T5853] Bluetooth: hci0: command tx timeout [ 77.983541][ T5855] Bluetooth: hci2: command tx timeout [ 77.988959][ T5853] Bluetooth: hci5: command tx timeout [ 78.007202][ T5847] veth1_vlan: entered promiscuous mode [ 78.079738][ T5860] veth0_vlan: entered promiscuous mode [ 78.133033][ T5845] veth0_macvtap: entered promiscuous mode [ 78.155540][ T5860] veth1_vlan: entered promiscuous mode [ 78.207407][ T5845] veth1_macvtap: entered promiscuous mode [ 78.229307][ T5852] veth0_macvtap: entered promiscuous mode [ 78.275245][ T5847] veth0_macvtap: entered promiscuous mode [ 78.288589][ T5852] veth1_macvtap: entered promiscuous mode [ 78.360288][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.372870][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.386625][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.400018][ T5847] veth1_macvtap: entered promiscuous mode [ 78.409727][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.426494][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.436565][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.447352][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.458580][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.469763][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.479819][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.484580][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.505260][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.516534][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.527252][ T5860] veth0_macvtap: entered promiscuous mode [ 78.545822][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.558397][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.568505][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.579200][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.590768][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.630275][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.639384][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.648341][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.657243][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.668858][ T5860] veth1_macvtap: entered promiscuous mode [ 78.681009][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.689893][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.699045][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.708563][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.737696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.745679][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.767973][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.780440][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.791666][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.802573][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.812803][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.823616][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.834849][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.855039][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.866248][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.876288][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.886894][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.897032][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.908201][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.918090][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.928586][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.940334][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.956804][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.968426][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.979937][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.990597][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.000495][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.011681][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.024010][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.054060][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.065620][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.076466][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.087323][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.099864][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.112494][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.123795][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.134545][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.145916][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.148138][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.164352][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.178767][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.189825][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.199080][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.231102][ T5864] veth0_vlan: entered promiscuous mode [ 79.249615][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.258824][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.268009][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.277040][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.380234][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.395430][ T5864] veth1_vlan: entered promiscuous mode [ 79.410009][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.513014][ T5864] veth0_macvtap: entered promiscuous mode [ 79.522958][ T5864] veth1_macvtap: entered promiscuous mode [ 79.541468][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.552250][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.562185][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.572721][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.582743][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.593463][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.603683][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.614426][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.625729][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.637016][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.648484][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.687073][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.698237][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.708434][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.719166][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.728065][ T5957] loop2: detected capacity change from 0 to 2048 [ 79.729258][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.746734][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.753893][ T5957] ======================================================= [ 79.753893][ T5957] WARNING: The mand mount option has been deprecated and [ 79.753893][ T5957] and is ignored by this kernel. Remove the mand [ 79.753893][ T5957] option from the mount to silence this warning. [ 79.753893][ T5957] ======================================================= [ 79.756684][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.802171][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.812109][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.822926][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.835956][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.853628][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.883531][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.897746][ T5957] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 79.903682][ T5864] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.920739][ T5864] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.931927][ T5864] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.935180][ T5957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.942390][ T5864] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.965080][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.982368][ T5853] Bluetooth: hci1: command tx timeout [ 79.982561][ T5855] Bluetooth: hci3: command tx timeout [ 79.987870][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.994165][ T5859] Bluetooth: hci4: command tx timeout [ 80.061963][ T5855] Bluetooth: hci5: command tx timeout [ 80.062804][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.067458][ T5855] Bluetooth: hci0: command tx timeout [ 80.079786][ T5859] Bluetooth: hci2: command tx timeout [ 80.097248][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.281051][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.289593][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.308800][ T5964] loop0: detected capacity change from 0 to 512 [ 80.400574][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.451935][ T5964] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 80.456002][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.460005][ T5964] UDF-fs: Scanning with blocksize 512 failed [ 80.507629][ T5964] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 80.570114][ T5964] UDF-fs: Scanning with blocksize 1024 failed [ 80.599323][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.629125][ T5964] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 80.659771][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.673581][ T5964] UDF-fs: Scanning with blocksize 2048 failed [ 80.690179][ T5964] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 80.709637][ T5964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.742794][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.763903][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.844989][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.873992][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.935661][ T5964] syz.0.9: attempt to access beyond end of device [ 80.935661][ T5964] loop0: rw=2049, sector=520, nr_sectors = 120 limit=512 [ 80.976453][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.015806][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.216447][ T5845] UDF-fs: warning (device loop0): udf_evict_inode: Inode 43 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 81.383136][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.605795][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 81.656008][ T5912] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 81.709301][ T5912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.748821][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.792787][ T5912] usb 4-1: SerialNumber: syz [ 81.853924][ T5912] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 81.948285][ T5995] loop2: detected capacity change from 0 to 8 [ 82.080313][ T5912] usb 4-1: USB disconnect, device number 2 [ 82.946744][ T6017] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24'. [ 82.966087][ T6004] loop5: detected capacity change from 0 to 512 [ 83.166421][ T6004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.221447][ T5910] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.231696][ T6004] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.327277][ T6030] Zero length message leads to an empty skb [ 83.367250][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.401780][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 83.415221][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.437616][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 83.474724][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.517116][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.564377][ T5910] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 83.589430][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.632728][ T5910] usb 1-1: Product: syz [ 83.652043][ T5910] usb 1-1: Manufacturer: syz [ 83.673313][ T5910] usb 1-1: SerialNumber: syz [ 83.704311][ T5910] usb 1-1: config 0 descriptor?? [ 83.763601][ T5910] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 83.928015][ T6041] loop1: detected capacity change from 0 to 8 [ 83.941775][ T6010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 83.948677][ T6010] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 83.983332][ T6010] vhci_hcd vhci_hcd.0: Device attached [ 84.044565][ T6043] vhci_hcd: connection closed [ 84.057310][ T12] vhci_hcd: stop threads [ 84.064044][ T5910] imon:send_packet: packet tx failed (-71) [ 84.089997][ T12] vhci_hcd: release socket [ 84.095075][ T12] vhci_hcd: disconnect device [ 84.102871][ T5910] imon 1-1:0.0: panel buttons/knobs setup failed [ 84.366079][ T5910] rc_core: IR keymap rc-imon-pad not found [ 84.373502][ T5910] Registered IR keymap rc-empty [ 84.378581][ T5910] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 84.391018][ T5910] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 84.422404][ T5910] imon:send_packet: packet tx failed (-71) [ 84.451833][ T5910] imon 1-1:0.0: remote input dev register failed [ 84.458835][ T5910] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 84.594638][ T6055] loop3: detected capacity change from 0 to 1024 [ 84.631185][ T6055] EXT4-fs: Ignoring removed orlov option [ 84.657230][ T6055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.766274][ T5910] imon 1-1:0.0: unable to initialize intf0, err 0 [ 84.791553][ T5910] imon:imon_probe: failed to initialize context! [ 84.850018][ T5910] imon 1-1:0.0: unable to register, err -19 [ 84.902361][ T5910] usb 1-1: USB disconnect, device number 2 [ 85.026981][ T6055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.119067][ T29] audit: type=1800 audit(1732238275.746:2): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.38" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 85.221435][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.241706][ T6055] loop3: detected capacity change from 1024 to 64 [ 85.411484][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 85.414296][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.431990][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.446010][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.460120][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.460191][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.460222][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 85.460271][ T5914] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 85.460303][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.472556][ T5914] usb 3-1: config 0 descriptor?? [ 85.482674][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.534384][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.548502][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.563325][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.578284][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.592824][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.607503][ T5852] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 85.764691][ T6079] loop4: detected capacity change from 0 to 8 [ 86.170235][ T5914] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input7 [ 86.199065][ T5914] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input8 [ 86.283542][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.442794][ T8] cfg80211: failed to load regulatory.db [ 86.558070][ T5914] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 86.571500][ T6060] kmmpd-loop3: attempt to access beyond end of device [ 86.571500][ T6060] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 86.604020][ T6060] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 87.274424][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 87.440638][ T6107] loop5: detected capacity change from 0 to 1024 [ 87.459087][ T6107] EXT4-fs: Ignoring removed orlov option [ 87.500631][ T6110] loop1: detected capacity change from 0 to 512 [ 87.546872][ T6110] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 87.547377][ T6107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.554421][ T6110] UDF-fs: Scanning with blocksize 512 failed [ 87.562615][ T6110] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 87.581648][ T6110] UDF-fs: Scanning with blocksize 1024 failed [ 87.603113][ T6110] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 87.615053][ T6110] UDF-fs: Scanning with blocksize 2048 failed [ 87.639088][ T5909] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 87.658632][ T6110] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 87.689034][ T6107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.693571][ T6110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.756322][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.821506][ T29] audit: type=1800 audit(1732238278.436:3): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.60" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 87.995991][ T6110] syz.1.61: attempt to access beyond end of device [ 87.995991][ T6110] loop1: rw=2049, sector=520, nr_sectors = 120 limit=512 [ 88.022697][ T6116] loop4: detected capacity change from 0 to 32768 [ 88.048251][ T6116] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.62 (6116) [ 88.071629][ T6116] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.081820][ T6107] loop5: detected capacity change from 1024 to 64 [ 88.088725][ T6116] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 88.097506][ T6116] BTRFS info (device loop4): using free-space-tree [ 88.162781][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.178791][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.193731][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.207929][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.222538][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.236875][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.250869][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.264926][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.278928][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.293021][ T5864] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.463697][ T5860] UDF-fs: warning (device loop1): udf_evict_inode: Inode 43 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 88.627327][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.680178][ T964] usb 3-1: USB disconnect, device number 2 [ 88.698605][ T6116] BTRFS info (device loop4): balance: start -s [ 88.705854][ T6116] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 88.713446][ T6116] BTRFS info (device loop4): space_info SYSTEM has 0 free, is not full [ 88.722367][ T6116] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 88.738364][ T6116] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 88.747881][ T6116] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 88.755939][ T6116] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 88.763738][ T6116] BTRFS info (device loop4): delayed_block_rsv: size 98304 reserved 98304 [ 88.772322][ T6116] BTRFS info (device loop4): delayed_refs_rsv: size 786432 reserved 786432 [ 88.819422][ T6116] BTRFS info (device loop4): relocating block group 1048576 flags system [ 88.979850][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.068976][ T6113] kmmpd-loop5: attempt to access beyond end of device [ 89.068976][ T6113] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 89.085923][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.096895][ T6113] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 89.108463][ T6116] BTRFS info (device loop4): balance: ended with status: 0 [ 89.126069][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 89.157073][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.208328][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.222912][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 89.236390][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.271327][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.273180][ T5847] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.371258][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.383544][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.624836][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.021038][ T6165] loop0: detected capacity change from 0 to 2048 [ 90.038988][ T6165] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 90.337749][ T6165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.448056][ T6168] loop1: detected capacity change from 0 to 32768 [ 90.492277][ T6168] read_mapping_page failed! [ 90.497065][ T6168] ERROR: (device loop1): txCommit: [ 90.497065][ T6168] [ 90.598523][ T5860] ERROR: (device loop1): diFree: numfree > numinos [ 90.598523][ T5860] [ 90.636387][ T6172] loop2: detected capacity change from 0 to 1024 [ 90.666439][ T6172] EXT4-fs: Ignoring removed orlov option [ 90.738637][ T65] bridge_slave_1: left allmulticast mode [ 90.740080][ T6172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.781643][ T65] bridge_slave_1: left promiscuous mode [ 90.840726][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.868853][ T6172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.952199][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.971559][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.991658][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.000483][ T65] bridge_slave_0: left allmulticast mode [ 91.019763][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.052016][ T65] bridge_slave_0: left promiscuous mode [ 91.057883][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.119382][ T5855] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.128470][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.240960][ T29] audit: type=1800 audit(1732238281.746:4): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 91.263064][ T29] audit: type=1804 audit(1732238281.776:5): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.77" name="/newroot/12/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 91.566820][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.592510][ T5855] Bluetooth: hci3: command tx timeout [ 91.767525][ T6210] capability: warning: `syz.1.87' uses 32-bit capabilities (legacy support in use) [ 91.973023][ T6218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.639570][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.650710][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'. [ 92.663402][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'. [ 92.673598][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.690673][ T65] bond0 (unregistering): Released all slaves [ 92.718345][ T6151] chnl_net:caif_netlink_parms(): no params data found [ 92.930318][ T6238] loop2: detected capacity change from 0 to 1024 [ 92.954155][ T6238] EXT4-fs: Ignoring removed orlov option [ 92.968993][ T6238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.027674][ T6240] binder: BINDER_SET_CONTEXT_MGR already set [ 93.034550][ T6240] binder: 6239:6240 ioctl 4018620d 200001c0 returned -16 [ 93.043496][ T6240] binder: 6239:6240 ioctl c0306201 200002c0 returned -14 [ 93.131719][ T6238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.261812][ T5855] Bluetooth: hci5: command tx timeout [ 93.303596][ T29] audit: type=1800 audit(1732238283.936:6): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.98" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 93.557655][ T6249] loop4: detected capacity change from 0 to 32768 [ 93.604235][ T6238] loop2: detected capacity change from 1024 to 64 [ 93.662723][ T5855] Bluetooth: hci3: command tx timeout [ 93.738127][ T6249] JBD2: Ignoring recovery information on journal [ 93.794744][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 93.830334][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 93.863401][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 93.914043][ T6249] jbd2_journal_bmap: journal block not found at offset 64 on loop4-27 [ 93.972031][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 93.986222][ T6249] JBD2: bad block at offset 64 [ 93.991775][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 94.016174][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 94.055065][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 94.088235][ T6249] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 94.168496][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 94.184803][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 94.220647][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 94.368516][ T6249] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 94.439580][ T6249] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 94.508235][ T6249] OCFS2: Returning error to the calling process. [ 94.514869][ T6249] (syz.4.101,6249,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5 [ 94.527469][ T6249] (syz.4.101,6249,1):__ocfs2_claim_clusters:2412 ERROR: status = -5 [ 94.535701][ T6249] (syz.4.101,6249,1):__ocfs2_claim_clusters:2420 ERROR: status = -5 [ 94.544238][ T6249] (syz.4.101,6249,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -5 [ 94.553213][ T6249] (syz.4.101,6249,1):ocfs2_block_group_alloc:709 ERROR: status = -5 [ 94.561605][ T6249] (syz.4.101,6249,1):ocfs2_block_group_alloc:762 ERROR: status = -5 [ 94.607037][ T6249] (syz.4.101,6249,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5 [ 94.625851][ T6249] (syz.4.101,6249,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5 [ 94.644597][ T6249] (syz.4.101,6249,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5 [ 94.670807][ T6249] (syz.4.101,6249,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5 [ 94.730890][ T6249] (syz.4.101,6249,1):ocfs2_expand_inline_dir:2822 ERROR: status = -5 [ 94.732556][ T6279] binder: 6278:6279 ioctl c0306201 200002c0 returned -14 [ 94.758348][ T6249] (syz.4.101,6249,1):ocfs2_extend_dir:3186 ERROR: status = -5 [ 94.777996][ T6249] (syz.4.101,6249,0):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -5 [ 94.790071][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.798001][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.807501][ T6249] (syz.4.101,6249,0):ocfs2_symlink:1875 ERROR: status = -5 [ 94.820079][ T6151] bridge_slave_0: entered allmulticast mode [ 94.826050][ T6249] (syz.4.101,6249,0):ocfs2_symlink:2076 ERROR: status = -5 [ 94.859226][ T6151] bridge_slave_0: entered promiscuous mode [ 94.891015][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.925963][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.940849][ T6151] bridge_slave_1: entered allmulticast mode [ 94.946708][ T6249] syz.4.101 (6249) used greatest stack depth: 17176 bytes left [ 94.961891][ T6151] bridge_slave_1: entered promiscuous mode [ 95.040577][ T6288] loop1: detected capacity change from 0 to 2048 [ 95.098250][ T6288] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 95.118993][ T5847] ocfs2: Unmounting device (7,4) on (node local) [ 95.199779][ T6288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.339858][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.354847][ T5855] Bluetooth: hci5: command tx timeout [ 95.461712][ T6241] kmmpd-loop2: attempt to access beyond end of device [ 95.461712][ T6241] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 95.500906][ T6241] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 95.510639][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.112'. [ 95.571622][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.112'. [ 95.697146][ T65] hsr_slave_0: left promiscuous mode [ 95.719827][ T65] hsr_slave_1: left promiscuous mode [ 95.736120][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.751616][ T5855] Bluetooth: hci3: command tx timeout [ 95.767544][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.817599][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.850205][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.897646][ T65] veth1_macvtap: left promiscuous mode [ 95.905648][ T65] veth0_macvtap: left promiscuous mode [ 95.912014][ T65] veth1_vlan: left promiscuous mode [ 95.925200][ T65] veth0_vlan: left promiscuous mode [ 96.402181][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.428392][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.441841][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.452918][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.465006][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.476621][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.764778][ T6326] binder: 6325:6326 ioctl c0306201 200002c0 returned -14 [ 96.880911][ T6329] loop1: detected capacity change from 0 to 2048 [ 96.901060][ T6329] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 96.915864][ T6329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.107919][ T6335] loop1: detected capacity change from 0 to 8 [ 97.424907][ T5859] Bluetooth: hci5: command tx timeout [ 97.638014][ T65] team0 (unregistering): Port device team_slave_1 removed [ 97.734245][ T65] team0 (unregistering): Port device team_slave_0 removed [ 97.821876][ T5859] Bluetooth: hci3: command tx timeout [ 98.469937][ T6357] loop0: detected capacity change from 0 to 2048 [ 98.499863][ T6357] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 98.543381][ T6357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.552725][ T5859] Bluetooth: hci2: command tx timeout [ 98.607343][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.711861][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.868090][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 99.042386][ T6151] team0: Port device team_slave_0 added [ 99.112778][ T6151] team0: Port device team_slave_1 added [ 99.202540][ T6369] loop0: detected capacity change from 0 to 256 [ 99.425975][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.441406][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.467851][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.500575][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.507855][ T5859] Bluetooth: hci5: command tx timeout [ 99.513595][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.542531][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.682483][ T6151] hsr_slave_0: entered promiscuous mode [ 99.696979][ T6151] hsr_slave_1: entered promiscuous mode [ 99.705348][ T6379] tap0: tun_chr_ioctl cmd 2147767507 [ 99.721680][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.730780][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.738429][ T6179] bridge_slave_0: entered allmulticast mode [ 99.750848][ T6179] bridge_slave_0: entered promiscuous mode [ 99.759682][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.766889][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.774233][ T6179] bridge_slave_1: entered allmulticast mode [ 99.781653][ T6179] bridge_slave_1: entered promiscuous mode [ 99.884425][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.025107][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.255382][ T6399] loop0: detected capacity change from 0 to 8 [ 100.354774][ T6400] loop4: detected capacity change from 0 to 2048 [ 100.426422][ T6179] team0: Port device team_slave_0 added [ 100.458308][ T6400] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 100.477261][ T6179] team0: Port device team_slave_1 added [ 100.487478][ T6400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.489622][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.147'. [ 100.534265][ T6407] netlink: 'syz.1.147': attribute type 7 has an invalid length. [ 100.544496][ T6407] netlink: 'syz.1.147': attribute type 8 has an invalid length. [ 100.552348][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 100.621561][ T5859] Bluetooth: hci2: command tx timeout [ 101.125194][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.157452][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.187039][ T6417] loop0: detected capacity change from 0 to 32768 [ 101.206030][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.324863][ T6417] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.376361][ T29] audit: type=1800 audit(1732238292.006:7): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.151" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 101.460424][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.497667][ T6429] loop4: detected capacity change from 0 to 512 [ 101.515412][ T6429] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.528898][ T6429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.555541][ T6429] EXT4-fs (loop4): 1 truncate cleaned up [ 101.580867][ T6429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.602836][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.628315][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.661163][ T5845] ocfs2: Unmounting device (7,0) on (node local) [ 101.734852][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.940370][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.005617][ T6318] chnl_net:caif_netlink_parms(): no params data found [ 102.187609][ T6446] loop1: detected capacity change from 0 to 8 [ 102.223352][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.398637][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.488537][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.622769][ T6179] hsr_slave_0: entered promiscuous mode [ 102.676837][ T6179] hsr_slave_1: entered promiscuous mode [ 102.701869][ T5859] Bluetooth: hci2: command tx timeout [ 102.724271][ T6179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.765814][ T6179] Cannot create hsr debugfs directory [ 103.011091][ T6151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.116597][ T6151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.287382][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.312825][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.335443][ T6318] bridge_slave_0: entered allmulticast mode [ 103.432571][ T6318] bridge_slave_0: entered promiscuous mode [ 103.480959][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.511533][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.516785][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 103.518885][ T6318] bridge_slave_1: entered allmulticast mode [ 103.577674][ T6318] bridge_slave_1: entered promiscuous mode [ 103.636019][ T6151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.886151][ T6151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.978801][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.988691][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.002331][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.012886][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.032076][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.039551][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.072391][ T6318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.084626][ T6318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.282884][ T6318] team0: Port device team_slave_0 added [ 104.294481][ T6318] team0: Port device team_slave_1 added [ 104.418330][ T6481] loop0: detected capacity change from 0 to 512 [ 104.466242][ T6481] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 104.487681][ T6481] UDF-fs: Scanning with blocksize 512 failed [ 104.510854][ T6481] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 104.536853][ T6481] UDF-fs: Scanning with blocksize 1024 failed [ 104.547368][ T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.563019][ T6481] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 104.582380][ T6481] UDF-fs: Scanning with blocksize 2048 failed [ 104.608463][ T6481] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 104.639356][ T6481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.658736][ T6485] loop1: detected capacity change from 0 to 512 [ 104.673534][ T6485] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 12 [ 104.775072][ T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.792395][ T5855] Bluetooth: hci2: command tx timeout [ 104.857583][ T5845] UDF-fs: warning (device loop0): udf_evict_inode: Inode 43 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 104.958283][ T6494] binder: 6493:6494 ioctl 4018620d 0 returned -22 [ 104.965777][ T6494] binder: 6493:6494 ioctl c0306201 200002c0 returned -14 [ 104.966059][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.984642][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.019882][ T6318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.069641][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.084864][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.135922][ T6318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.224314][ T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.405624][ T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.499336][ T6318] hsr_slave_0: entered promiscuous mode [ 105.515821][ T6318] hsr_slave_1: entered promiscuous mode [ 105.529617][ T6318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.542204][ T6318] Cannot create hsr debugfs directory [ 105.672112][ T6179] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 105.771466][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.875777][ T6179] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 105.886458][ T6179] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 105.949814][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 105.970862][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 106.004248][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.017845][ T6179] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 106.027062][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.064673][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.074451][ T5855] Bluetooth: hci1: command tx timeout [ 106.098829][ T8] usb 1-1: Product: syz [ 106.116950][ T8] usb 1-1: Manufacturer: syz [ 106.131605][ T65] bridge_slave_1: left allmulticast mode [ 106.137340][ T65] bridge_slave_1: left promiscuous mode [ 106.145621][ T8] usb 1-1: SerialNumber: syz [ 106.152651][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.166089][ T8] usb 1-1: config 0 descriptor?? [ 106.173756][ T65] bridge_slave_0: left allmulticast mode [ 106.179501][ T65] bridge_slave_0: left promiscuous mode [ 106.189274][ T8] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.199103][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.210398][ T8] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 106.227009][ T65] bridge_slave_1: left allmulticast mode [ 106.235661][ T65] bridge_slave_1: left promiscuous mode [ 106.241645][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.260065][ T65] bridge_slave_0: left allmulticast mode [ 106.268461][ T65] bridge_slave_0: left promiscuous mode [ 106.275218][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.760924][ T6516] loop1: detected capacity change from 0 to 64 [ 106.817033][ T8] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 106.829185][ T8] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 106.840898][ T8] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 106.848784][ T8] em28xx 1-1:0.0: No AC97 audio processor [ 107.039450][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.055092][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.067022][ T65] bond0 (unregistering): Released all slaves [ 107.246777][ T6523] binder: 6522:6523 ioctl 4018620d 0 returned -22 [ 107.266230][ T6523] binder: 6522:6523 ioctl c0306201 200002c0 returned -14 [ 107.382367][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.394730][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.406092][ T65] bond0 (unregistering): Released all slaves [ 107.649465][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 108.061205][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.145816][ T5855] Bluetooth: hci1: command tx timeout [ 108.346640][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.360723][ T6318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 108.409973][ T6318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 108.508373][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.526907][ T6318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 108.542009][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.550061][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.559161][ T6471] bridge_slave_0: entered allmulticast mode [ 108.569407][ T6471] bridge_slave_0: entered promiscuous mode [ 108.585411][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.592740][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.620591][ T6318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 108.645847][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.653264][ T5910] usb 1-1: USB disconnect, device number 3 [ 108.657580][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.664071][ T5910] em28xx 1-1:0.0: Disconnecting em28xx [ 108.670702][ T6471] bridge_slave_1: entered allmulticast mode [ 108.698795][ T5910] em28xx 1-1:0.0: Freeing device [ 108.707843][ T6471] bridge_slave_1: entered promiscuous mode [ 108.960279][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.985709][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.992973][ T6465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.084635][ T65] hsr_slave_0: left promiscuous mode [ 109.102957][ T65] hsr_slave_1: left promiscuous mode [ 109.120357][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.128577][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.137567][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.145662][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.169956][ T65] hsr_slave_0: left promiscuous mode [ 109.185113][ T65] hsr_slave_1: left promiscuous mode [ 109.196020][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.203931][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.215391][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.223806][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.278053][ T65] veth1_macvtap: left promiscuous mode [ 109.290569][ T65] veth0_macvtap: left promiscuous mode [ 109.302379][ T65] veth1_vlan: left promiscuous mode [ 109.308711][ T65] veth0_vlan: left promiscuous mode [ 109.329215][ T65] veth1_macvtap: left promiscuous mode [ 109.338713][ T65] veth0_macvtap: left promiscuous mode [ 109.351807][ T65] veth1_vlan: left promiscuous mode [ 109.364130][ T65] veth0_vlan: left promiscuous mode [ 109.512850][ T6565] loop1: detected capacity change from 0 to 32768 [ 109.538687][ T6565] JBD2: Ignoring recovery information on journal [ 109.548686][ T6565] jbd2_journal_bmap: journal block not found at offset 64 on loop1-27 [ 109.557020][ T6565] JBD2: bad block at offset 64 [ 109.568859][ T6565] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 109.706693][ T5860] ocfs2: Unmounting device (7,1) on (node local) [ 110.008482][ T6571] binder: 6570:6571 ioctl 4018620d 0 returned -22 [ 110.017175][ T6571] binder: 6570:6571 ioctl c0306201 200002c0 returned -14 [ 110.221476][ T5855] Bluetooth: hci1: command tx timeout [ 110.525958][ T65] team0 (unregistering): Port device team_slave_1 removed [ 110.580226][ T65] team0 (unregistering): Port device team_slave_0 removed [ 110.629359][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.804610][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 110.828774][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 110.853814][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.884045][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.903621][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.911914][ T8] usb 2-1: Product: syz [ 110.916115][ T8] usb 2-1: Manufacturer: syz [ 110.931156][ T8] usb 2-1: SerialNumber: syz [ 110.948203][ T8] usb 2-1: config 0 descriptor?? [ 110.972517][ T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.982520][ T8] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 111.587465][ T8] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 111.598671][ T8] em28xx 2-1:0.0: Config register raw data: 0x56 [ 111.687230][ T65] team0 (unregistering): Port device team_slave_1 removed [ 111.750305][ T65] team0 (unregistering): Port device team_slave_0 removed [ 111.799395][ T8] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 111.811400][ T8] em28xx 2-1:0.0: No AC97 audio processor [ 112.308210][ T5855] Bluetooth: hci1: command tx timeout [ 112.365657][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.457832][ T6471] team0: Port device team_slave_0 added [ 112.505615][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.596441][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.603753][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.647390][ T6471] team0: Port device team_slave_1 added [ 112.794599][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.814642][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.900517][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.923179][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.930513][ T6561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.969549][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.984354][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.014259][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.235329][ T6471] hsr_slave_0: entered promiscuous mode [ 113.243209][ T6471] hsr_slave_1: entered promiscuous mode [ 113.258543][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.285888][ T6471] Cannot create hsr debugfs directory [ 113.406679][ T6318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.482024][ T964] usb 2-1: USB disconnect, device number 2 [ 113.495067][ T964] em28xx 2-1:0.0: Disconnecting em28xx [ 113.536853][ T964] em28xx 2-1:0.0: Freeing device [ 113.569488][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.757146][ T6318] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.006532][ T6318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.018828][ T6318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.126274][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.133632][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.192700][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.200112][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.475499][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.579683][ T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.630343][ T6318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.671079][ T6471] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 114.843886][ T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.909611][ T6471] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 114.938881][ T6471] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 114.977504][ T6635] binder: 6634:6635 ioctl c0306201 0 returned -14 [ 114.987516][ T6471] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 115.131971][ T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.210952][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.333417][ T6151] veth0_vlan: entered promiscuous mode [ 115.450231][ T6151] veth1_vlan: entered promiscuous mode [ 115.536354][ T65] bridge_slave_1: left allmulticast mode [ 115.550245][ T65] bridge_slave_1: left promiscuous mode [ 115.575457][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.607469][ T65] bridge_slave_0: left allmulticast mode [ 115.631560][ T65] bridge_slave_0: left promiscuous mode [ 115.651895][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.911503][ T5966] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.111652][ T5966] usb 2-1: Using ep0 maxpacket: 16 [ 116.139583][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 116.181245][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.203486][ T5966] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.214676][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.225895][ T5966] usb 2-1: Product: syz [ 116.230322][ T5966] usb 2-1: Manufacturer: syz [ 116.242732][ T5966] usb 2-1: SerialNumber: syz [ 116.256942][ T5966] usb 2-1: config 0 descriptor?? [ 116.290069][ T5966] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 116.304523][ T5966] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 116.560985][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.582000][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.600957][ T65] bond0 (unregistering): Released all slaves [ 116.756495][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.859246][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.886528][ T6318] veth0_vlan: entered promiscuous mode [ 116.892108][ T5966] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 116.915432][ T5966] em28xx 2-1:0.0: Config register raw data: 0x56 [ 116.998326][ T6151] veth0_macvtap: entered promiscuous mode [ 117.028628][ T6318] veth1_vlan: entered promiscuous mode [ 117.119435][ T5966] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 117.120437][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.134107][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.141346][ T5966] em28xx 2-1:0.0: No AC97 audio processor [ 117.183650][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.191099][ T6561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.253634][ T6151] veth1_macvtap: entered promiscuous mode [ 117.345609][ T6179] veth0_vlan: entered promiscuous mode [ 117.366373][ T6179] veth1_vlan: entered promiscuous mode [ 117.469700][ T65] hsr_slave_0: left promiscuous mode [ 117.483378][ T65] hsr_slave_1: left promiscuous mode [ 117.507213][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.526483][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.543260][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.561108][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.600158][ T65] veth1_macvtap: left promiscuous mode [ 117.626337][ T65] veth0_macvtap: left promiscuous mode [ 117.636511][ T65] veth1_vlan: left promiscuous mode [ 117.646676][ T65] veth0_vlan: left promiscuous mode [ 118.399951][ T65] team0 (unregistering): Port device team_slave_1 removed [ 118.442939][ T65] team0 (unregistering): Port device team_slave_0 removed [ 118.756419][ T5910] usb 2-1: USB disconnect, device number 3 [ 118.776991][ T5910] em28xx 2-1:0.0: Disconnecting em28xx [ 118.790556][ T5910] em28xx 2-1:0.0: Freeing device [ 118.996659][ T6706] binder: 6705:6706 ioctl c0306201 0 returned -14 [ 119.147568][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.159760][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.189648][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.202416][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.225903][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.284942][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.297936][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.308928][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.347042][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.360331][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.419251][ T6318] veth0_macvtap: entered promiscuous mode [ 119.465182][ T6318] veth1_macvtap: entered promiscuous mode [ 119.481102][ T6151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.500531][ T6151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.522185][ T6151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.544289][ T6151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.598583][ T6179] veth0_macvtap: entered promiscuous mode [ 119.648234][ T6179] veth1_macvtap: entered promiscuous mode [ 119.804860][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.842842][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.880759][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.892334][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.928716][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.939835][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.962764][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.988612][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.014611][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.035890][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.060542][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.083128][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.101395][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.131443][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.146269][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.192908][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.210794][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.221667][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.231631][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.242297][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.252239][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.262758][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.275231][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.287394][ T6318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.296374][ T6318] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.306140][ T6318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.315043][ T6318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.413488][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.476928][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.525429][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.581850][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.592533][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.621348][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.641390][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.661350][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.681710][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.731376][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.759743][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.829811][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.849053][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.878408][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.966797][ T6179] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.976088][ T6179] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.985013][ T6179] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.994492][ T6179] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.142324][ T964] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.183906][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.217345][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.353223][ T964] usb 1-1: Using ep0 maxpacket: 16 [ 121.363877][ T964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 121.376377][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.399050][ T964] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.449309][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.483538][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.491578][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.522193][ T964] usb 1-1: Product: syz [ 121.526448][ T964] usb 1-1: Manufacturer: syz [ 121.531099][ T964] usb 1-1: SerialNumber: syz [ 121.622921][ T964] usb 1-1: config 0 descriptor?? [ 121.667305][ T964] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.695620][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.714437][ T6759] binder: 6757:6759 ioctl c0306201 0 returned -14 [ 121.721056][ T964] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 121.736507][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.863407][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.889186][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.960056][ T6767] loop8: detected capacity change from 0 to 1024 [ 121.972337][ T6471] veth0_vlan: entered promiscuous mode [ 122.021108][ T6471] veth1_vlan: entered promiscuous mode [ 122.028249][ T6767] EXT4-fs: Ignoring removed orlov option [ 122.060303][ T6767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.107535][ T6471] veth0_macvtap: entered promiscuous mode [ 122.163883][ T6767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.211805][ T6471] veth1_macvtap: entered promiscuous mode [ 122.235154][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.246213][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.256797][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.267720][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.277839][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.288619][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.298853][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.309908][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.320378][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.331595][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.343151][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.355970][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.366768][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.376745][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.387497][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.397504][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.408112][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.418079][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.429074][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.439432][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.441533][ T29] audit: type=1800 audit(1732238312.986:8): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.116" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 122.450043][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.470125][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.487778][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.496128][ T964] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 122.588221][ T964] em28xx 1-1:0.0: Config register raw data: 0x56 [ 122.649525][ T6471] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.659300][ T964] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 122.667046][ T964] em28xx 1-1:0.0: No AC97 audio processor [ 122.673366][ T6471] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.683217][ T6471] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.692595][ T6471] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.830243][ T6318] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.197016][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.231617][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.374218][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.401515][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.909314][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.234'. [ 124.130643][ T6825] loop6: detected capacity change from 0 to 512 [ 124.224023][ T6825] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 124.281612][ T5927] usb 1-1: USB disconnect, device number 4 [ 124.288725][ T5927] em28xx 1-1:0.0: Disconnecting em28xx [ 124.311395][ T6825] UDF-fs: Scanning with blocksize 512 failed [ 124.362337][ T5927] em28xx 1-1:0.0: Freeing device [ 124.431881][ T6825] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 124.473545][ T6825] UDF-fs: Scanning with blocksize 1024 failed [ 124.530245][ T6825] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 124.561442][ T6825] UDF-fs: Scanning with blocksize 2048 failed [ 124.593851][ T6825] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 124.659621][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.169452][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.8.245'. [ 126.009761][ T6877] loop0: detected capacity change from 0 to 32768 [ 126.184781][ T6877] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.515425][ T5845] ocfs2: Unmounting device (7,0) on (node local) [ 126.591070][ T6904] binder: BINDER_SET_CONTEXT_MGR already set [ 126.597547][ T6904] binder: 6903:6904 ioctl 4018620d 200001c0 returned -16 [ 126.804622][ T6909] loop6: detected capacity change from 0 to 512 [ 126.814512][ T6909] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 126.823576][ T6909] UDF-fs: Scanning with blocksize 512 failed [ 126.871711][ T6909] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 126.879416][ T6909] UDF-fs: Scanning with blocksize 1024 failed [ 126.889019][ T6909] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 126.945948][ T6909] UDF-fs: Scanning with blocksize 2048 failed [ 126.989577][ T6909] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 127.079106][ T6909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.301542][ T5914] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 127.467510][ T5914] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.531475][ T5914] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.540489][ T5914] usb 9-1: config 1 has no interface number 0 [ 127.577502][ T5914] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.680815][ T5914] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 127.792025][ T5914] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.801198][ T5914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.148814][ T6940] loop7: detected capacity change from 0 to 32768 [ 128.159437][ T5914] usb 9-1: Product: syz [ 128.163854][ T5914] usb 9-1: Manufacturer: syz [ 128.168750][ T5914] usb 9-1: SerialNumber: syz [ 128.215522][ T6940] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 128.438654][ T6179] ocfs2: Unmounting device (7,7) on (node local) [ 129.040102][ T5914] cdc_ncm 9-1:1.1: bind() failure [ 129.254608][ T5915] usb 9-1: USB disconnect, device number 2 [ 129.431986][ T6983] loop9: detected capacity change from 0 to 512 [ 129.473535][ T6983] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 129.506755][ T6983] UDF-fs: Scanning with blocksize 512 failed [ 129.566262][ T6983] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 129.618303][ T6983] UDF-fs: Scanning with blocksize 1024 failed [ 129.657203][ T6983] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 129.683435][ T6983] UDF-fs: Scanning with blocksize 2048 failed [ 129.717068][ T6983] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 129.786954][ T6983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.334375][ T7000] loop1: detected capacity change from 0 to 32768 [ 130.427451][ T7000] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.590556][ T7012] loop6: detected capacity change from 0 to 8 [ 130.798396][ T5860] ocfs2: Unmounting device (7,1) on (node local) [ 130.931506][ T5915] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.063682][ T7016] loop8: detected capacity change from 0 to 4096 [ 131.101414][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 131.119056][ T5915] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.122266][ T7016] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 131.174838][ T7021] bond0: entered promiscuous mode [ 131.180986][ T7021] bond_slave_0: entered promiscuous mode [ 131.194783][ T7021] bond_slave_1: entered promiscuous mode [ 131.211121][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.219803][ T7021] netlink: 10 bytes leftover after parsing attributes in process `syz.7.293'. [ 131.287031][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.337946][ T5915] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.412244][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.494490][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.738592][ T5915] usb 1-1: usb_control_msg returned -32 [ 131.763963][ T5915] usbtmc 1-1:16.0: can't read capabilities [ 131.804297][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.298'. [ 132.201048][ T7053] loop7: detected capacity change from 0 to 512 [ 132.225071][ T7053] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 132.246346][ T7053] UDF-fs: Scanning with blocksize 512 failed [ 132.312686][ T7053] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 132.339048][ T7053] UDF-fs: Scanning with blocksize 1024 failed [ 132.369959][ T7053] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 132.395766][ T7053] UDF-fs: Scanning with blocksize 2048 failed [ 132.429203][ T7053] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 132.470089][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.477138][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.495013][ T7053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.284557][ T7072] loop7: detected capacity change from 0 to 128 [ 133.384507][ T7068] loop1: detected capacity change from 0 to 32768 [ 133.469939][ T7072] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.502720][ T7072] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.535128][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.763996][ T5915] usb 1-1: USB disconnect, device number 5 [ 133.878666][ T7068] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.927723][ T29] audit: type=1800 audit(1732238324.556:9): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.305" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 134.082495][ T7094] IPv4: Oversized IP packet from 127.202.26.0 [ 134.177042][ T5860] ocfs2: Unmounting device (7,1) on (node local) [ 134.317621][ T7104] binder: BINDER_SET_CONTEXT_MGR already set [ 134.323933][ T7104] binder: 7103:7104 ioctl 4018620d 200001c0 returned -16 [ 134.334491][ T7100] loop9: detected capacity change from 0 to 256 [ 134.376527][ T7100] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 134.401378][ T7100] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 134.421071][ T7100] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 134.432588][ T7100] UDF-fs: Scanning with blocksize 512 failed [ 134.440813][ T7100] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 134.568479][ T7100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.697557][ T6179] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.931719][ T5855] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 135.105468][ T7123] loop9: detected capacity change from 0 to 8 [ 135.311707][ T5910] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 135.598201][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.609454][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.616497][ T7138] loop8: detected capacity change from 0 to 128 [ 135.619458][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.639656][ T5910] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.649837][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.669775][ T5910] usb 8-1: config 0 descriptor?? [ 135.804937][ T7138] zonefs: Bad value for 'errors' [ 136.107263][ T5910] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 136.135492][ T5910] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 136.163059][ T5910] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 136.170670][ T5910] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 136.221777][ T5910] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 136.267849][ T5910] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 136.328163][ T5910] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 136.823869][ T7179] loop9: detected capacity change from 0 to 8 [ 136.939646][ T7181] loop1: detected capacity change from 0 to 512 [ 137.094015][ T7181] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.340: iget: bogus i_mode (0) [ 137.154323][ T8] usb 8-1: USB disconnect, device number 2 [ 137.240418][ T7181] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.340: couldn't read orphan inode 17 (err -117) [ 137.286600][ T7181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.447609][ T7181] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.340: bg 0: block 7: invalid block bitmap [ 137.482087][ T7181] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 137.667072][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.335290][ T7225] loop7: detected capacity change from 0 to 8 [ 138.462137][ T7229] binder: 7228:7229 ioctl c0306201 200002c0 returned -14 [ 139.375576][ T7262] loop8: detected capacity change from 0 to 2048 [ 139.758015][ T7277] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.939599][ T7272] loop0: detected capacity change from 0 to 32768 [ 139.949032][ T7279] binder: 7278:7279 ioctl c0306201 200002c0 returned -14 [ 140.068879][ T7288] loop9: detected capacity change from 0 to 512 [ 140.155433][ T7272] JBD2: Ignoring recovery information on journal [ 140.160154][ T7288] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 140.165477][ T7272] jbd2_journal_bmap: journal block not found at offset 64 on loop0-27 [ 140.170308][ T7288] UDF-fs: Scanning with blocksize 512 failed [ 140.177599][ T7272] JBD2: bad block at offset 64 [ 140.185566][ T7272] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 140.285791][ T7288] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 140.293647][ T7288] UDF-fs: Scanning with blocksize 1024 failed [ 140.315379][ T7288] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 140.331833][ T7288] UDF-fs: Scanning with blocksize 2048 failed [ 140.341010][ T7277] NILFS (loop8): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 140.352122][ T7286] loop1: detected capacity change from 0 to 4096 [ 140.355659][ T7277] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=2) [ 140.410481][ T7288] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 140.459337][ T5845] ocfs2: Unmounting device (7,0) on (node local) [ 140.466025][ T7277] Remounting filesystem read-only [ 140.498525][ T5910] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 140.557247][ T6318] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 140.671700][ T7286] EXT4-fs error (device loop1): ext4_quota_enable:7112: comm syz.1.374: inode #255: comm syz.1.374: iget: illegal inode # [ 140.716451][ T7288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.725860][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 140.738097][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 140.740694][ T7304] evm: overlay not supported [ 140.805428][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.817244][ T7286] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.374: Bad quota inode: 255, type: 2 [ 140.870641][ T7286] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix. [ 140.938643][ T5910] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.976734][ T7286] EXT4-fs (loop1): mount failed [ 140.991390][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.999496][ T5910] usb 7-1: Product: syz [ 141.011477][ T5910] usb 7-1: Manufacturer: syz [ 141.016196][ T5910] usb 7-1: SerialNumber: syz [ 141.098286][ T5910] usb 7-1: config 0 descriptor?? [ 141.163036][ T5910] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.174750][ T5910] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 141.312184][ T7302] loop7: detected capacity change from 0 to 32768 [ 141.440929][ T7302] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 141.614990][ T6471] UDF-fs: warning (device loop9): udf_evict_inode: Inode 43 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 141.631985][ T29] audit: type=1800 audit(1732238332.236:10): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.378" name="bus" dev="loop7" ino=17058 res=0 errno=0 [ 141.788399][ T6179] ocfs2: Unmounting device (7,7) on (node local) [ 141.983555][ T5910] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 141.998924][ T5910] em28xx 7-1:0.0: Config register raw data: 0x22 [ 142.013047][ T5910] em28xx 7-1:0.0: I2S Audio (1 sample rate(s)) [ 142.059985][ T5910] em28xx 7-1:0.0: No AC97 audio processor [ 142.356404][ T7338] binder: BINDER_SET_CONTEXT_MGR already set [ 142.363009][ T7338] binder: 7337:7338 ioctl 4018620d 200001c0 returned -16 [ 142.371086][ T7338] binder: 7337:7338 ioctl c0306201 200002c0 returned -14 [ 143.011152][ T7357] loop0: detected capacity change from 0 to 512 [ 143.111700][ T7357] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 143.140797][ T7357] UDF-fs: Scanning with blocksize 512 failed [ 143.170404][ T7357] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 143.199364][ T8] usb 7-1: USB disconnect, device number 2 [ 143.225215][ T7357] UDF-fs: Scanning with blocksize 1024 failed [ 143.264413][ T7357] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 143.300096][ T7357] UDF-fs: Scanning with blocksize 2048 failed [ 143.328771][ T7357] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 143.416826][ T7357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.489151][ T7362] loop2: detected capacity change from 0 to 7 [ 143.602658][ T7362] Dev loop2: unable to read RDB block 7 [ 143.609399][ T7362] loop2: unable to read partition table [ 143.650062][ T7362] loop2: partition table beyond EOD, truncated [ 143.715883][ T7362] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.758747][ T5845] UDF-fs: warning (device loop0): udf_evict_inode: Inode 42 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 144.923513][ T7363] loop7: detected capacity change from 0 to 32768 [ 145.147803][ T7363] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 145.354995][ T29] audit: type=1800 audit(1732238335.976:11): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.395" name="bus" dev="loop7" ino=17058 res=0 errno=0 [ 145.676442][ T6179] ocfs2: Unmounting device (7,7) on (node local) [ 145.699660][ T7420] loop0: detected capacity change from 0 to 512 [ 145.717508][ T7417] loop9: detected capacity change from 0 to 32768 [ 145.739823][ T7417] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.411 (7417) [ 145.759874][ T7417] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 145.772330][ T7417] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 145.782280][ T7417] BTRFS info (device loop9): using free-space-tree [ 145.790729][ T7420] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 145.799769][ T7420] UDF-fs: Scanning with blocksize 512 failed [ 145.808646][ T7420] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 145.816549][ T7420] UDF-fs: Scanning with blocksize 1024 failed [ 145.916588][ T7420] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 145.980899][ T7420] UDF-fs: Scanning with blocksize 2048 failed [ 146.008809][ T7417] BTRFS info (device loop9): rebuilding free space tree [ 146.103913][ T7420] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 146.257188][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 146.266568][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 146.278588][ T29] audit: type=1800 audit(1732238336.906:12): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.411" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 146.338001][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'. [ 146.379458][ T7420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.466658][ T6471] BTRFS info (device loop9): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 146.815672][ T5845] UDF-fs: warning (device loop0): udf_evict_inode: Inode 42 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 147.671484][ T7480] loop0: detected capacity change from 0 to 256 [ 147.778378][ T7480] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 148.404496][ T7475] netlink: 'syz.9.425': attribute type 26 has an invalid length. [ 148.839549][ T7506] loop0: detected capacity change from 0 to 1024 [ 148.934354][ T7511] loop6: detected capacity change from 0 to 512 [ 148.978067][ T7511] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 149.024411][ T7511] UDF-fs: Scanning with blocksize 512 failed [ 149.084443][ T7511] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 149.151921][ T7506] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 149.191578][ T7511] UDF-fs: Scanning with blocksize 1024 failed [ 149.287393][ T7511] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 149.322620][ T7511] UDF-fs: Scanning with blocksize 2048 failed [ 149.350442][ T7506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.448703][ T7511] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 149.525021][ T7511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.736468][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.829810][ T6151] UDF-fs: warning (device loop6): udf_evict_inode: Inode 42 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 150.104996][ T7538] loop8: detected capacity change from 0 to 1024 [ 150.209482][ T7538] EXT4-fs: Ignoring removed orlov option [ 150.215423][ T7538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.068392][ T7547] syz.1.445 (7547): drop_caches: 2 [ 151.175127][ T7549] loop0: detected capacity change from 0 to 764 [ 151.212765][ T7538] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.268421][ T7544] loop6: detected capacity change from 0 to 128 [ 151.423746][ T7549] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.430037][ T29] audit: type=1800 audit(1732238342.046:13): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.444" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 151.519098][ T7544] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 151.549211][ T7544] sysv_free_block: trying to free block not in datazone [ 151.724468][ T6151] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 151.736684][ T7538] loop8: detected capacity change from 1024 to 64 [ 151.752589][ T7560] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 151.779111][ T7560] team0: Device ipvlan2 failed to register rx_handler [ 151.911186][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 151.945999][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 151.960486][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 151.982426][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 151.997488][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 152.012858][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 152.027945][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 152.042957][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 152.057435][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 152.074908][ T6318] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 152.400450][ T7576] loop6: detected capacity change from 0 to 512 [ 152.492837][ T7576] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 152.671611][ T7576] EXT4-fs (loop6): 1 orphan inode deleted [ 152.683540][ T7586] block nbd9: Device being setup by another task [ 152.711968][ T7586] block nbd9: shutting down sockets [ 152.741425][ T7576] EXT4-fs (loop6): 1 truncate cleaned up [ 152.748107][ T7576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.952103][ T6318] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.977490][ T7576] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.007745][ T7550] kmmpd-loop8: attempt to access beyond end of device [ 153.007745][ T7550] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 153.056414][ T7550] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 153.380872][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.580350][ T7592] bridge: RTM_NEWNEIGH with invalid ether address [ 154.168479][ T7616] loop7: detected capacity change from 0 to 32768 [ 154.471777][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 154.617062][ T7616] bcachefs (/dev/loop7): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 3410587754) [ 154.634534][ T7616] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 155.027216][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.082092][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.158790][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.255721][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.276149][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.283701][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.327762][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.704601][ T7630] loop0: detected capacity change from 0 to 32768 [ 155.721678][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.739868][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.750275][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.764134][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.773777][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.786068][ T58] usb 7-1: config 0 descriptor?? [ 155.893207][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.954945][ T7630] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 156.078523][ T7633] loop7: detected capacity change from 0 to 32768 [ 156.158198][ T7633] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 156.226177][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.278312][ T7633] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 156.298020][ T5845] ocfs2: Unmounting device (7,0) on (node local) [ 156.309098][ T7633] (syz.7.474,7633,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 156.330615][ T7633] (syz.7.474,7633,1):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 124554051584 failed -12 [ 156.341343][ T7633] (syz.7.474,7633,1):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12 [ 156.350005][ T7633] (syz.7.474,7633,1):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12 [ 156.359985][ T7633] (syz.7.474,7633,1):ocfs2_test_inode_bit:2941 ERROR: status = -12 [ 156.368075][ T7633] (syz.7.474,7633,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 156.406895][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x4 [ 156.415158][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.423915][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.432497][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.439944][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.447486][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.455033][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.462637][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.470066][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.477670][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.485621][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.493421][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.500865][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 156.509108][ T58] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 156.527908][ T58] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 156.528910][ T6179] ocfs2: Unmounting device (7,7) on (node local) [ 156.898320][ T7627] loop1: detected capacity change from 0 to 32768 [ 156.993323][ T7627] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 157.031481][ T29] audit: type=1800 audit(1732238347.656:14): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 157.155834][ T5860] ocfs2: Unmounting device (7,1) on (node local) [ 157.247857][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 157.255391][ T7654] loop0: detected capacity change from 0 to 256 [ 157.342185][ T5859] Bluetooth: hci2: command tx timeout [ 157.447023][ T11] bridge_slave_1: left allmulticast mode [ 157.471354][ T11] bridge_slave_1: left promiscuous mode [ 157.509106][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.665731][ T11] bridge_slave_0: left allmulticast mode [ 157.681999][ T11] bridge_slave_0: left promiscuous mode [ 157.704060][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.910147][ T7672] misc userio: Invalid payload size [ 158.546970][ T7678] loop1: detected capacity change from 0 to 32768 [ 158.568646][ T7682] loop7: detected capacity change from 0 to 512 [ 158.618005][ T7682] EXT4-fs: inline encryption not supported [ 158.729060][ T7678] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 158.904386][ T7682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.921672][ T5966] usb 7-1: USB disconnect, device number 3 [ 159.451413][ T5859] Bluetooth: hci2: command tx timeout [ 159.480880][ T7682] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.565892][ T7682] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.485: corrupted inode contents [ 159.644335][ T7682] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.485: mark_inode_dirty error [ 159.658979][ T7682] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.485: corrupted inode contents [ 159.739118][ T7682] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.485: corrupted inode contents [ 159.763898][ T7682] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.485: mark_inode_dirty error [ 159.783853][ T7682] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.485: corrupted inode contents [ 159.844691][ T7682] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.485: mark_inode_dirty error [ 159.859683][ T5860] ocfs2: Unmounting device (7,1) on (node local) [ 159.870100][ T7682] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.485: corrupted inode contents [ 159.920915][ T7682] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.485: mark_inode_dirty error [ 159.970223][ T7693] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.485: corrupted inode contents [ 160.066968][ T58] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 160.225704][ T6179] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.255891][ T58] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 160.278076][ T58] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.290953][ T58] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 160.330892][ T58] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 160.359582][ T58] usb 10-1: Manufacturer: syz [ 160.492819][ T58] usb 10-1: config 0 descriptor?? [ 160.754640][ T58] rc_core: IR keymap rc-hauppauge not found [ 160.760617][ T58] Registered IR keymap rc-empty [ 160.770562][ T58] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 160.783385][ T58] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input9 [ 160.918860][ T7706] loop7: detected capacity change from 0 to 32768 [ 160.927073][ T58] usb 10-1: USB disconnect, device number 2 [ 161.049610][ T7706] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 161.167252][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.179965][ T6179] ocfs2: Unmounting device (7,7) on (node local) [ 161.282398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.292478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.301429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 161.436891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.539287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.552013][ T5859] Bluetooth: hci2: command tx timeout [ 161.641765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.240216][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.272357][ T11] bond0 (unregistering): Released all slaves [ 162.551450][ T52] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 162.682752][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.732595][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.740051][ T7612] bridge_slave_0: entered allmulticast mode [ 162.747566][ T52] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 162.768861][ T52] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.791483][ T52] usb 10-1: Product: syz [ 162.810861][ T7612] bridge_slave_0: entered promiscuous mode [ 162.816629][ T52] usb 10-1: Manufacturer: syz [ 162.820302][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.829150][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.839900][ T7612] bridge_slave_1: entered allmulticast mode [ 162.858559][ T7612] bridge_slave_1: entered promiscuous mode [ 163.597444][ T5859] Bluetooth: hci2: command tx timeout [ 163.617515][ T52] usb 10-1: SerialNumber: syz [ 163.651733][ T52] usb 10-1: config 0 descriptor?? [ 163.836779][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.944213][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.967381][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.981954][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.035596][ T5909] usb 10-1: USB disconnect, device number 3 [ 164.320424][ T7612] team0: Port device team_slave_0 added [ 164.357903][ T7612] team0: Port device team_slave_1 added [ 164.488765][ T11] hsr_slave_0: left promiscuous mode [ 164.501182][ T11] hsr_slave_1: left promiscuous mode [ 164.522026][ T7754] loop0: detected capacity change from 0 to 2048 [ 164.533351][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.555541][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.578376][ T7754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.597873][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.631615][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.652319][ T7754] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.722551][ T7754] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.507: bg 0: block 192: padding at end of block bitmap is not set [ 164.770019][ T7760] loop9: detected capacity change from 0 to 512 [ 164.795537][ T7760] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 164.803373][ T7760] UDF-fs: Scanning with blocksize 512 failed [ 164.817689][ T11] veth1_macvtap: left promiscuous mode [ 164.824757][ T7760] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 164.832429][ T7760] UDF-fs: Scanning with blocksize 1024 failed [ 164.836983][ T11] veth0_macvtap: left promiscuous mode [ 164.858536][ T7760] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 164.858620][ T11] veth1_vlan: left promiscuous mode [ 164.880112][ T7760] UDF-fs: Scanning with blocksize 2048 failed [ 164.889002][ T11] veth0_vlan: left promiscuous mode [ 164.919503][ T7760] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 164.961021][ T7760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.015432][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.086019][ T6471] UDF-fs: warning (device loop9): udf_evict_inode: Inode 42 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 165.264109][ T5909] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 165.306545][ T7751] loop6: detected capacity change from 0 to 32768 [ 165.374092][ T7751] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 165.428588][ T6151] ocfs2: Unmounting device (7,6) on (node local) [ 165.462267][ T5909] usb 8-1: Using ep0 maxpacket: 8 [ 165.481854][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.504212][ T5909] usb 8-1: config 0 has no interfaces? [ 165.530974][ T5909] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 165.541975][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.550150][ T5909] usb 8-1: Product: syz [ 165.559008][ T5909] usb 8-1: Manufacturer: syz [ 165.571023][ T5909] usb 8-1: SerialNumber: syz [ 165.602154][ T5909] usb 8-1: config 0 descriptor?? [ 166.120677][ T11] team0 (unregistering): Port device team_slave_1 removed [ 166.179324][ T7773] loop7: detected capacity change from 0 to 256 [ 166.252620][ T7773] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 166.269128][ T11] team0 (unregistering): Port device team_slave_0 removed [ 167.034500][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.6.513'. [ 167.052699][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.6.513'. [ 167.086859][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.116479][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.205103][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.234199][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.246371][ T7779] loop0: detected capacity change from 0 to 256 [ 167.253360][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.373402][ T7779] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.402294][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.414888][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.6.513'. [ 167.424247][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.6.513'. [ 168.427405][ T5966] usb 8-1: USB disconnect, device number 3 [ 168.610405][ T7793] loop1: detected capacity change from 0 to 512 [ 168.824317][ T7793] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 168.836671][ T7612] hsr_slave_0: entered promiscuous mode [ 168.889403][ T7793] UDF-fs: Scanning with blocksize 512 failed [ 168.898198][ T7612] hsr_slave_1: entered promiscuous mode [ 168.936459][ T7793] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 168.954661][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.977279][ T7793] UDF-fs: Scanning with blocksize 1024 failed [ 168.987285][ T7612] Cannot create hsr debugfs directory [ 168.997746][ T7793] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.061567][ T7793] UDF-fs: Scanning with blocksize 2048 failed [ 169.223254][ T7793] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 169.258334][ T7793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.271895][ T5914] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 169.458032][ T5914] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 169.479230][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.484714][ T5860] UDF-fs: warning (device loop1): udf_evict_inode: Inode 42 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 169.511986][ T7809] loop7: detected capacity change from 0 to 1024 [ 169.535512][ T5914] usb 1-1: config 0 descriptor?? [ 169.562445][ T5914] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 169.576280][ T5914] dw2102: su3000_power_ctrl: 1, initialized 0 [ 169.586438][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 169.663722][ T7815] loop6: detected capacity change from 0 to 512 [ 169.679752][ T7809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.709046][ T5914] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 169.860668][ T5914] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 169.957355][ T5914] usb 1-1: USB disconnect, device number 6 [ 169.969668][ T7821] loop1: detected capacity change from 0 to 2048 [ 170.018951][ T7815] EXT4-fs (loop6): Test dummy encryption mode enabled [ 170.019567][ T7821] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.026226][ T7815] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.080507][ T7823] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.103922][ T5989] udevd[5989]: incorrect nilfs2 checksum on /dev/loop1 [ 170.126586][ T7815] EXT4-fs (loop6): 1 truncate cleaned up [ 170.148601][ T6179] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.165138][ T7821] ------------[ cut here ]------------ [ 170.171479][ T7821] WARNING: CPU: 0 PID: 7821 at security/landlock/fs.c:955 current_check_refer_path+0x80f/0xee0 [ 170.172590][ T7815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.182115][ T7821] Modules linked in: [ 170.182181][ T7821] CPU: 0 UID: 0 PID: 7821 Comm: syz.1.531 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 170.182220][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 170.182239][ T7821] RIP: 0010:current_check_refer_path+0x80f/0xee0 [ 170.226825][ T7821] Code: 89 44 24 20 eb 2f e8 e0 ca 15 fd 66 b8 40 00 89 44 24 20 eb 20 e8 d1 ca 15 fd 66 b8 00 10 89 44 24 20 eb 11 e8 c2 ca 15 fd 90 <0f> 0b 90 c7 44 24 20 00 00 00 00 8b 44 24 28 84 c0 0f 84 d2 00 00 [ 170.247713][ T7821] RSP: 0018:ffffc90004e4fa40 EFLAGS: 00010283 [ 170.254624][ T7821] RAX: ffffffff847f381e RBX: 000000000000000f RCX: 0000000000080000 [ 170.262895][ T7821] RDX: ffffc9000d3a3000 RSI: 00000000000005c1 RDI: 00000000000005c2 [ 170.271018][ T7821] RBP: ffffc90004e4fbb8 R08: 0000000000000005 R09: ffffffff847f36de [ 170.279447][ T7821] R10: 0000000000000008 R11: ffff88802c3a5a00 R12: ffff88807f2c11a0 [ 170.287624][ T7821] R13: ffff888024e2db00 R14: 1ffff1100fe58000 R15: ffff88807f2c0000 [ 170.296081][ T7821] FS: 00007fdac95e76c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 170.305267][ T7821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.311992][ T7821] CR2: 000000110c41620c CR3: 0000000032cd8000 CR4: 0000000000350ef0 [ 170.320042][ T7821] Call Trace: [ 170.323554][ T7821] [ 170.326533][ T7821] ? __warn+0x168/0x4e0 [ 170.330811][ T7821] ? current_check_refer_path+0x80f/0xee0 [ 170.336797][ T7821] ? report_bug+0x2b3/0x500 [ 170.341605][ T7821] ? current_check_refer_path+0x80f/0xee0 [ 170.347880][ T7821] ? handle_bug+0x60/0x90 [ 170.352873][ T7821] ? exc_invalid_op+0x1a/0x50 [ 170.357672][ T7821] ? asm_exc_invalid_op+0x1a/0x20 [ 170.362852][ T7821] ? current_check_refer_path+0x6ce/0xee0 [ 170.368682][ T7821] ? current_check_refer_path+0x80e/0xee0 [ 170.374670][ T7821] ? current_check_refer_path+0x80f/0xee0 [ 170.380491][ T7821] ? __pfx_lock_release+0x10/0x10 [ 170.385809][ T7821] ? __pfx_current_check_refer_path+0x10/0x10 [ 170.392010][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.397736][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.403529][ T7821] ? __d_lookup+0x64/0x7b0 [ 170.408044][ T7821] security_path_rename+0x22a/0x4e0 [ 170.413437][ T7821] do_renameat2+0x94a/0x13f0 [ 170.418147][ T7821] ? __pfx_do_renameat2+0x10/0x10 [ 170.423325][ T7821] ? __might_fault+0xaa/0x120 [ 170.428091][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.433900][ T7821] ? getname_flags+0x1e3/0x540 [ 170.438743][ T7821] ? do_syscall_64+0x100/0x230 [ 170.443676][ T7821] __x64_sys_renameat2+0xce/0xe0 [ 170.449159][ T7821] do_syscall_64+0xf3/0x230 [ 170.454311][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.460335][ T7821] RIP: 0033:0x7fdac877e819 [ 170.464970][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.484707][ T7821] RSP: 002b:00007fdac95e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 170.493355][ T7821] RAX: ffffffffffffffda RBX: 00007fdac8935fa0 RCX: 00007fdac877e819 [ 170.501457][ T7821] RDX: ffffffffffffff9c RSI: 0000000020000000 RDI: ffffffffffffff9c [ 170.509508][ T7821] RBP: 00007fdac87f175e R08: 0000000000000002 R09: 0000000000000000 [ 170.517645][ T7821] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000000 [ 170.525749][ T7821] R13: 0000000000000000 R14: 00007fdac8935fa0 R15: 00007ffe369d3238 [ 170.533898][ T7821] [ 170.536975][ T7821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.544305][ T7821] CPU: 0 UID: 0 PID: 7821 Comm: syz.1.531 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 170.554616][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 170.564732][ T7821] Call Trace: [ 170.568033][ T7821] [ 170.570971][ T7821] dump_stack_lvl+0x241/0x360 [ 170.575734][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.580961][ T7821] ? __pfx__printk+0x10/0x10 [ 170.585601][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.591282][ T7821] ? vscnprintf+0x5d/0x90 [ 170.595676][ T7821] panic+0x349/0x880 [ 170.599620][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.605291][ T7821] ? __warn+0x177/0x4e0 [ 170.609481][ T7821] ? __pfx_panic+0x10/0x10 [ 170.613954][ T7821] __warn+0x34b/0x4e0 [ 170.617966][ T7821] ? current_check_refer_path+0x80f/0xee0 [ 170.623736][ T7821] report_bug+0x2b3/0x500 [ 170.628109][ T7821] ? current_check_refer_path+0x80f/0xee0 [ 170.633885][ T7821] handle_bug+0x60/0x90 [ 170.638067][ T7821] exc_invalid_op+0x1a/0x50 [ 170.642594][ T7821] asm_exc_invalid_op+0x1a/0x20 [ 170.647471][ T7821] RIP: 0010:current_check_refer_path+0x80f/0xee0 [ 170.653848][ T7821] Code: 89 44 24 20 eb 2f e8 e0 ca 15 fd 66 b8 40 00 89 44 24 20 eb 20 e8 d1 ca 15 fd 66 b8 00 10 89 44 24 20 eb 11 e8 c2 ca 15 fd 90 <0f> 0b 90 c7 44 24 20 00 00 00 00 8b 44 24 28 84 c0 0f 84 d2 00 00 [ 170.673522][ T7821] RSP: 0018:ffffc90004e4fa40 EFLAGS: 00010283 [ 170.679652][ T7821] RAX: ffffffff847f381e RBX: 000000000000000f RCX: 0000000000080000 [ 170.687665][ T7821] RDX: ffffc9000d3a3000 RSI: 00000000000005c1 RDI: 00000000000005c2 [ 170.695696][ T7821] RBP: ffffc90004e4fbb8 R08: 0000000000000005 R09: ffffffff847f36de [ 170.703726][ T7821] R10: 0000000000000008 R11: ffff88802c3a5a00 R12: ffff88807f2c11a0 [ 170.711742][ T7821] R13: ffff888024e2db00 R14: 1ffff1100fe58000 R15: ffff88807f2c0000 [ 170.719761][ T7821] ? current_check_refer_path+0x6ce/0xee0 [ 170.725549][ T7821] ? current_check_refer_path+0x80e/0xee0 [ 170.731327][ T7821] ? __pfx_lock_release+0x10/0x10 [ 170.736417][ T7821] ? __pfx_current_check_refer_path+0x10/0x10 [ 170.743156][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.748826][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.754495][ T7821] ? __d_lookup+0x64/0x7b0 [ 170.758979][ T7821] security_path_rename+0x22a/0x4e0 [ 170.764225][ T7821] do_renameat2+0x94a/0x13f0 [ 170.768868][ T7821] ? __pfx_do_renameat2+0x10/0x10 [ 170.773932][ T7821] ? __might_fault+0xaa/0x120 [ 170.778641][ T7821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.784311][ T7821] ? getname_flags+0x1e3/0x540 [ 170.789096][ T7821] ? do_syscall_64+0x100/0x230 [ 170.793880][ T7821] __x64_sys_renameat2+0xce/0xe0 [ 170.798846][ T7821] do_syscall_64+0xf3/0x230 [ 170.803376][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.809287][ T7821] RIP: 0033:0x7fdac877e819 [ 170.813718][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.833356][ T7821] RSP: 002b:00007fdac95e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 170.841802][ T7821] RAX: ffffffffffffffda RBX: 00007fdac8935fa0 RCX: 00007fdac877e819 [ 170.849791][ T7821] RDX: ffffffffffffff9c RSI: 0000000020000000 RDI: ffffffffffffff9c [ 170.857880][ T7821] RBP: 00007fdac87f175e R08: 0000000000000002 R09: 0000000000000000 [ 170.865890][ T7821] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000000 [ 170.873883][ T7821] R13: 0000000000000000 R14: 00007fdac8935fa0 R15: 00007ffe369d3238 [ 170.881887][ T7821] [ 170.885320][ T7821] Kernel Offset: disabled [ 170.889740][ T7821] Rebooting in 86400 seconds..