last executing test programs: 56.572785602s ago: executing program 0 (id=659): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 22.812091268s ago: executing program 3 (id=715): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000001c0), 0x4) ustat(0x3, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 21.323507555s ago: executing program 1 (id=718): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x90) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x1, 0xc77, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x1, 0x42}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1}}], 0x2, 0x62, 0x0) 17.161746262s ago: executing program 3 (id=724): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a686cf", 0x0, 0x7}) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r5, 0x2, 0x0, 0x0, 0x0, 0x0) 16.667057314s ago: executing program 1 (id=726): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x90) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x1, 0xc77, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x1, 0x42}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1}}], 0x2, 0x62, 0x0) 15.682968818s ago: executing program 4 (id=727): timer_create(0x0, &(0x7f0000000240)={0x0, 0x3a}, &(0x7f0000bbdffc)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000280), 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) chdir(&(0x7f0000000340)='./cgroup\x00') read$msr(r0, &(0x7f0000000380)=""/188, 0xbc) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x88, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a573da8dd49c0c6d33f0a3898c315943f48ff06761880b65a") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 11.846578596s ago: executing program 0 (id=676): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r0, 0x7fff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) fcntl$setstatus(r1, 0x4, 0x6100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x1f) write$P9_RLERROR(r0, &(0x7f0000000340)=ANY=[], 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r8 = fcntl$dupfd(r6, 0x0, r7) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001900)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r9 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 11.845009546s ago: executing program 1 (id=738): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.823546378s ago: executing program 3 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x38}, 0x2}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.880600324s ago: executing program 0 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x100000]}) 9.880312744s ago: executing program 1 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000e6"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r2, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) name_to_handle_at(r6, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0xa, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b0000000000950000e400000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 9.880153004s ago: executing program 3 (id=731): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x2, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff041, 0x0) lseek(0xffffffffffffffff, 0x4, 0x0) 9.879962144s ago: executing program 4 (id=732): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) syz_emit_ethernet(0xaa, &(0x7f0000000900)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x70, 0x3a, 0x0, @remote, @mcast2, {[@srh={0xff, 0x8, 0x4, 0x4, 0x4, 0x20, 0x8000, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @private1}}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0xfffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xde, {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b40000001800000426bd7000010000801c2020fffd04c80200", @ANYRES32=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000001100)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 6.275271723s ago: executing program 3 (id=733): msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) r0 = socket$inet(0x2, 0x4000000805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa20080045000028000000000002907800000000ffffffff11e090780000000062ea00000004000000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) creat(0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8e37f3", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) lseek(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) listen(r0, 0x3f) 6.272151543s ago: executing program 2 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x38}, 0x2}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.254351564s ago: executing program 1 (id=734): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) socket$kcm(0x10, 0x3, 0x10) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000300)) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000a40)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.082354919s ago: executing program 4 (id=735): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x90) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x1, 0xc77, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x1, 0x42}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1}}], 0x2, 0x62, 0x0) 5.95168709s ago: executing program 0 (id=736): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x90) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x1, 0xc77, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x1, 0x42}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1}}], 0x2, 0x62, 0x0) 5.192752705s ago: executing program 2 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0xc4c85513, &(0x7f0000000140)={0xa, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$eJzs3dFrW18dAPDvvW1+v3XrTKc+zIFzuEk3dGm7uq34MB2IPg3U+T5rm5XStBltuq1luA7/AEFEBUH0RV8E/4CB7E8QYaDvoqKIbvrgw/RKkpu6ZUlbXdor7ecDp/ecw7n5npM0J/fce0kCOLLORcTNiMjSLLsUEeW8figi0mZmq52a7V6+eDTXTElk2e2/jESS1zWbNfPv5/ueyHc7FhFf+WLE15O3465tbC7N1mrV1bw80VhOXmXZ5uXF5dmF6kJ1ZXp66trM9ZmrM5MDGedYRNz4/B+++62ffuHGLz714Ld3/nTxG+0BtnXGMWhJjLxVNxwRq/sRrCDN8ZTy/NXdGj/Z//4AANBf83j/gxHx8Yi4FOUYah3NAQAAAIdJ9tnReJVEZAAAAMChlUbEaCRpJb/fdzTStFJp38P74Tie1uprjU9m5e3zBWNRSu8u1qqT+b0DY1FKmuWp/B7bTvlKV3k6Ik5FxHfKI61yZa5emy/0zAcAAAAcHSe61v9/L7fX/wAAAMAhM1Z0BwAAAIB9Z/0PAAAAh5/1PwAAABxqX7p1q5myzu9fz9/fWF+q3788X11bqiyvz1Xm6qv3Kgv1+kLrO/uWd3u8Wr1+79Oxsv5wolFda0ysbWzeWa6vrzTuLLZ+DhwAAAAowKmPPftNEhFbnxlJO3Xv5dtSRDaU55/+5Ieni+khsF/S/6bx7/evH8DBGyq6A0BhhovuAFCYUtEdAAr39jzw5pFB35t3frn7Yyevsux/7BYAADBA4x/Zvv7fSvHa9f/kcaFdA/ZZfv0/SYruCHDgXP+Ho8v1Pzi6SjsdAVgUwKGX7uGt/i7X/9vcAwAAAEUbbaUkreTrgNFI00ol4mTrZwFKyd3FWnUyIj4QEb8ul95vlqdaeyZODwAAAAAAAAAAAAAAAAAAAAAAAADAHmVZEhkAAABwqEWkf0xa5wGGYrx8YbT7/MB7yT/KrW1EPPjB7e89nG00Vqea9X/drm98P6+/UsQZDAAAAKBbZ53eWccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCC9fPForpMOMu6fb0bEWK/4w3GstT0WpYg4/rckhl/bL4mIoQHE33oSEad7xU+a3YqxvBfd8dOIGCk4/okBxIej7Flz/vlcr/dfGuda297vv+E8vav+81+6Pf8N9Zn/Tu4xxpnnP5/oG/9JxJnh3vNPJ37SJ/75ncOWOpmvfXVzs1+j7McR4z0/f5I3Yk00lu9NrG1sXl5cnl2oLlRXpqenrs1cn7k6Mzlxd7FWzf/2jPHtjz79107jP94n/tgu47+w8/i3/fP5wxcf6npOolP+UZZdPN/79T/d2paz7vidz75P5J8DzfJ4J7/Vzr/u7M9+dXan8c/3Gf9ur//FPY7/0pe/+bs9NgUADsDaxubSbK1WXZU5MpmRPTbOHrf/R9496Egc4ABn4//kec6fvoMc+wAzRc5KAADAfvjPQX/RPQEAAAAAAAAAAAAAAAAAAICja7evAYsBfJ1Yd8ytYoYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCjfwcAAP//s+jcUA==") write$FUSE_INIT(r0, &(0x7f0000000340)={0x50}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f00000002c0)) 4.850764424s ago: executing program 2 (id=741): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x90) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x1, 0xc77, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x1, 0x42}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1}}], 0x2, 0x62, 0x0) 4.245977196s ago: executing program 4 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setfsuid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r3 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r3, 0x0, 0x18, 0x0, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000c96, &(0x7f0000000180)=ANY=[@ANYBLOB="636865636b3d72656c617865642c696f636861727365743d69736f383835392d312c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030300030303030303030392c686964652c6f76657272696465726f636b7065726d2c636865636b3d7374726963742c6d61703d6f66662c6d6f64653d3078303030303030303030303030303030312c696f636861727365743d63703933322c6e6f726f636b2c646d6f64653d3078666666666666666666666666666366612c6d61703d6e6f72bf616c2c6d61703d61636f726e2c6d6f1c113d3078302330303030303030303030303030352c686964652c657569643e9bffbbc8dc0831f1f71752c0ec6370d60ec0e169761a3a8f175112119b57f387cea723b9c1ceb05c28c44fa818248d2baadc1b5d05f2db2b872312abba57baab497f38ff34f39d07", @ANYRES8=0x0, @ANYBLOB="2c6f815abdc1e3d22493d6626a5f757365723d", @ANYRES8, @ANYBLOB="b8dd7a36e920d213dee765f8b23cbcdcd3"], 0x12, 0x9e8, &(0x7f0000000440)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008aec1, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sigaltstack(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 4.241783416s ago: executing program 0 (id=754): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) accept4$unix(r6, 0x0, 0x0, 0x0) 3.535537357s ago: executing program 2 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305839, &(0x7f0000000240)=0x28084) 1.902329937s ago: executing program 0 (id=745): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000870000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe56, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d, 0x10, 0x0, 0xffffffffffffff9f}, 0x2a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x8001, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) timer_create(0x6, &(0x7f0000000480)={0x0, 0x22, 0x2, @thr={&(0x7f0000000380)="431ab40361ae7aa60daa17db2019029f06668217f1beebe0f6ee523e999a56ca97aa45f575025e095fdfb5eb8e8f3171aab5f694d11e0113cd8718ac18f7478f7a362bf1d5bf07a3604e82de693d4747becb105f2fcb7f7fd3f3b3a6ace17695032752202338d67f9ec11dfe9be1d157d95d753942b2ddadfa017101eed65eeabd13db75a0de0a96833695f086a1cea2f572b51a7e2e51726034026bef9ed3191c301465c9029a29c3b5c0e4432b2642e152e2b3b216b08bc278128b5a7faa73a8c100d5db33ffeeee2888db7a661d979ade00a432e7579012e5909dd6a5f935cc9bd6167ec4f35a2b2de4bd", &(0x7f0000000580)="7f93f34c80b142e77999976b29e23b5f33215da8da02e833893590d5c6454d3c2801514ae96cd28740bdcf05a310cdeefbb344cd90c205c2858b08c39c88375ff6f36dd58b51233e5117ef76c471f4e081f5c03b7740a2ca6bf5089426322df8e70fd00602e46cfefcce2e492d656c25d02545db83539ce782d90acd11963fde79d8dc0a36d35afc122c06ec875aaadf3b3dad1b9b3daa0b8628006abe285bf5b3b8bcdcb133c9ef4d2a9995a0f9195c7b031b66b38d117541"}}, &(0x7f0000000640)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000080)) sendfile(r5, r5, &(0x7f0000000000)=0x1, 0x2) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 1.871823379s ago: executing program 2 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x38}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) 1.544936357s ago: executing program 4 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x38}, 0x2}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.443409856s ago: executing program 3 (id=749): mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x2102086, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x375, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000040000000e200000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='pwc_handler_exit\x00', r3}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r5 = memfd_create(&(0x7f0000000480)='\x17\xaa\xc6P\xe8\x1b\xc6\x14:', 0x4) ftruncate(r5, 0xb939) pwritev(r5, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000240)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) 1.442545276s ago: executing program 1 (id=760): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) unlink(&(0x7f0000000140)='./cgroup\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x5dcd}}]}}, 0xf) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108000604"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="0402550600000000000007070ab165300e00ffffffffffff090607360a8e080000000000000007700a00691e0300ffffffffffff05d305e77791ff07000000000000fcd2dfbb189cf25905f25e1308ff07ffffffffffff00fc0d699cf70200"], 0x58) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c80032002e000100035e0808040000000100060001010200040005a7180006000800030006c0a9094500530dd090d63068b1100502080004000000d1df000007000000"], 0x37) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 88.129072ms ago: executing program 2 (id=750): prlimit64(0x0, 0xb6712b7fd41fa6ae, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000040)="e3e971", 0x3}], 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x6, 0x2a3, &(0x7f0000000180)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfea7) ftruncate(r4, 0x7) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 0s ago: executing program 4 (id=751): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x48ed, @local}}, 0xcb5, 0x0, 0x4ef, 0xfffffffc, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000005400)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x18}}], 0x1, 0x20040860) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) r2 = socket(0x2, 0xa, 0x80000009) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000440)={0x9, 0x0, 0x6, 0x5d137180}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x74, &(0x7f0000000100)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3f}, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1f}, @in6={0xa, 0x4e23, 0x5ed, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff3fd3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40, 0x1, 0x3, 0x6, 0x6, 0x3, 0x0, 0x2, 0x6, 0x3, 0x1}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): acity change from 0 to 128 [ 326.736765][ T6128] Falling back ldisc for ptm0. [ 326.844222][ T5910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.862603][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 326.958968][ T6138] loop1: detected capacity change from 0 to 512 [ 327.069156][ T6138] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.105241][ T6138] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 327.695883][ T6152] syz.3.450[6152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.696349][ T6152] syz.3.450[6152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.799997][ T5910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.851387][ T6138] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 328.113075][ T6138] EXT4-fs (loop1): Remounting filesystem read-only [ 328.147562][ T6138] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.448: invalid indirect mapped block 1 (level 1) [ 328.271853][ T6138] EXT4-fs (loop1): 1 truncate cleaned up [ 328.329451][ T6138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 328.596431][ T6169] loop3: detected capacity change from 0 to 1024 [ 328.933829][ T6169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.349494][ T5713] EXT4-fs (loop1): unmounting filesystem. [ 329.789834][ T6177] loop2: detected capacity change from 0 to 1024 [ 329.826731][ T6182] loop4: detected capacity change from 0 to 1024 [ 329.911391][ T6177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.934086][ T6182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.965632][ T6183] serio: Serial port pts0 [ 330.295204][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.229899][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.264478][ T5910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.279001][ T5910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.308146][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.208935][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.213668][ T6181] loop1: detected capacity change from 0 to 2048 [ 332.228160][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.282652][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.329984][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.337158][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.299288][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.363752][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.429890][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.437071][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.438275][ T3627] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.445271][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.465222][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.647547][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.656590][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.665403][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.674255][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.683247][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.691761][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.700605][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.745843][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.787142][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.968342][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.324423][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.418684][ T3637] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 335.496688][ T11] device hsr_slave_0 left promiscuous mode [ 335.531706][ T11] device hsr_slave_1 left promiscuous mode [ 335.618225][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.631808][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.650143][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.667119][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.679551][ T11] device bridge_slave_1 left promiscuous mode [ 335.689210][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.706075][ T11] device bridge_slave_0 left promiscuous mode [ 335.731594][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.834835][ T6232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.855700][ T11] device veth1_macvtap left promiscuous mode [ 335.872415][ T11] device veth0_macvtap left promiscuous mode [ 335.883344][ T11] device veth1_vlan left promiscuous mode [ 335.898485][ T11] device veth0_vlan left promiscuous mode [ 335.913789][ T152] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 336.177827][ T1036] block nbd4: Attempted send on invalid socket [ 336.184032][ T1036] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 336.197623][ T11] infiniband syz1: set down [ 336.202423][ T6235] SQUASHFS error: Failed to read block 0x0: -5 [ 336.211920][ T6235] unable to read squashfs_super_block [ 336.360718][ T152] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.391961][ T152] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 336.414759][ T152] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.452327][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.536107][ T6218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.824696][ T6239] loop3: detected capacity change from 0 to 1024 [ 336.894181][ T6239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.913120][ T6253] loop3: detected capacity change from 0 to 1024 [ 337.966245][ T6253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.234561][ T152] usb 3-1: USB disconnect, device number 7 [ 339.245701][ T11] team0 (unregistering): Port device team_slave_1 removed [ 339.397181][ T6266] loop3: detected capacity change from 0 to 256 [ 339.405198][ T11] team0 (unregistering): Port device team_slave_0 removed [ 339.410325][ T6266] exfat: Deprecated parameter 'utf8' [ 339.494937][ T6266] exfat: Deprecated parameter 'namecase' [ 339.592478][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.682672][ T6266] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1806556a, utbl_chksum : 0xe619d30d) [ 339.736684][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.426943][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.434103][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.555410][ T11] bond0 (unregistering): Released all slaves [ 341.664594][ T6275] loop2: detected capacity change from 0 to 512 [ 341.745578][ T4707] smc: removing ib device syz1 [ 341.850567][ T3684] lo speed is unknown, defaulting to 1000 [ 343.852193][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.869898][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 343.963071][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.094878][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.581458][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.598206][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.768844][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.785956][ T6299] loop2: detected capacity change from 0 to 1024 [ 345.794565][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.811792][ T6299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.817095][ T5910] device veth0_vlan entered promiscuous mode [ 345.828406][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.837076][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.879511][ T5910] device veth1_vlan entered promiscuous mode [ 346.137941][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 347.976811][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 347.985459][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.995425][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.131798][ T5910] device veth0_macvtap entered promiscuous mode [ 348.168612][ T6312] tipc: Can't bind to reserved service type 0 [ 348.176896][ T5910] device veth1_macvtap entered promiscuous mode [ 348.345786][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.358072][ T6311] sp0: Synchronizing with TNC [ 348.366681][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.379782][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.394739][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.417193][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.418707][ C1] eth0: bad gso: type: 1, size: 1408 [ 348.430744][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.444960][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.454548][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.491865][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.502326][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.636844][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.663830][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.677391][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.693114][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.705174][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.782794][ T6322] xt_hashlimit: overflow, rate too high: 0 [ 348.811018][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.875001][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.994134][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.047635][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.095788][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.111260][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.121406][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.132030][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.142240][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.178204][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.224982][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.276876][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.319267][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.362370][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.372793][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.382599][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.393672][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.478946][ T5910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.488100][ T5910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.504098][ T5910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.516523][ T5910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.596133][ T6328] loop2: detected capacity change from 0 to 16 [ 350.649006][ T3637] Bluetooth: hci3: command tx timeout [ 350.658160][ T3820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.667630][ T3820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.671385][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 350.726419][ T6328] erofs: (device loop2): mounted with root inode @ nid 36. [ 350.777045][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.914114][ T6331] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 350.929067][ T6331] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 350.944855][ T6331] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 350.976125][ T6331] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 350.985806][ T6331] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 351.687455][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.846016][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.854816][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.893982][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.910707][ T6338] loop3: detected capacity change from 0 to 16 [ 351.913462][ T6315] device bridge_slave_0 entered promiscuous mode [ 351.960668][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.990182][ T6338] erofs: (device loop3): mounted with root inode @ nid 36. [ 352.019017][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.035296][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.106428][ T6315] device bridge_slave_1 entered promiscuous mode [ 352.267508][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.390308][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.401684][ T27] audit: type=1326 audit(1724709697.746:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.0.399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f7f79e79 code=0x0 [ 352.611215][ T6315] team0: Port device team_slave_0 added [ 352.658658][ T6315] team0: Port device team_slave_1 added [ 352.843594][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.901765][ T3637] Bluetooth: hci3: command tx timeout [ 352.912914][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.530227][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 353.594905][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.767977][ C1] eth0: bad gso: type: 1, size: 1408 [ 353.877214][ T27] audit: type=1326 audit(1724709699.103:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.3.489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff84ab79e79 code=0x0 [ 354.637263][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.644250][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.764186][ T6365] loop0: detected capacity change from 0 to 1024 [ 354.821335][ T6365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.848186][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.037367][ T6366] Bluetooth: MGMT ver 1.22 [ 355.231180][ T3679] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 355.427641][ T3637] Bluetooth: hci3: command tx timeout [ 355.534551][ T3679] usb 3-1: Using ep0 maxpacket: 8 [ 355.761914][ T3679] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.827739][ T6315] device hsr_slave_0 entered promiscuous mode [ 355.905000][ T6315] device hsr_slave_1 entered promiscuous mode [ 356.052008][ T6315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.098681][ T6315] Cannot create hsr debugfs directory [ 356.737775][ T3679] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.791273][ T3679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.823487][ T2621] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 356.866954][ T3679] usb 3-1: Product: syz [ 356.881894][ T3679] usb 3-1: Manufacturer: syz [ 356.886724][ T3679] usb 3-1: SerialNumber: syz [ 357.119514][ T3648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 357.130695][ T3648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 357.149726][ T3648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 357.165150][ T3648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 357.176528][ T3648] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 357.191889][ T2621] usb 4-1: Using ep0 maxpacket: 32 [ 357.372797][ T3648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.684146][ T3648] Bluetooth: hci3: command tx timeout [ 357.733662][ T2621] usb 4-1: unable to get BOS descriptor or descriptor too short [ 357.842149][ T2621] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 357.879800][ T2621] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 357.901780][ T2621] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 357.923478][ T2621] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 358.003386][ T2621] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 358.238355][ T6315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.307975][ T2621] usb 4-1: string descriptor 0 read error: -22 [ 358.314256][ T2621] usb 4-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 358.348034][ T2621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.401651][ T2621] usb 4-1: config 0 descriptor?? [ 358.494022][ T2621] xillyusb 4-1:0.0: Failed to send quiesce request. Aborting. [ 358.534376][ T2621] xillyusb: probe of 4-1:0.0 failed with error -5 [ 358.575124][ T6315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.740337][ T6315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.752108][ T3679] cdc_ncm 3-1:1.0: failed to get mac address [ 358.913244][ T2621] usb 4-1: USB disconnect, device number 10 [ 358.960921][ T6315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.000378][ T6381] chnl_net:caif_netlink_parms(): no params data found [ 359.018254][ T3679] cdc_ncm 3-1:1.0: bind() failure [ 359.045626][ T3679] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 359.067198][ T3679] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 359.109722][ T3679] usbtest: probe of 3-1:1.1 failed with error -71 [ 359.153701][ T3679] usb 3-1: USB disconnect, device number 8 [ 359.309140][ T6398] loop0: detected capacity change from 0 to 8 [ 359.341290][ T6398] SQUASHFS error: lzo decompression failed, data probably corrupt [ 359.349530][ T6398] SQUASHFS error: Failed to read block 0x91: -5 [ 359.355877][ T6398] SQUASHFS error: Unable to read metadata cache entry [8f] [ 359.371431][ T6398] SQUASHFS error: Unable to read inode 0x11f [ 359.453749][ T6398] loop0: detected capacity change from 0 to 512 [ 359.470465][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.624801][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.680355][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.709568][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.721069][ T6381] device bridge_slave_0 entered promiscuous mode [ 359.729986][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.748996][ T3648] Bluetooth: hci7: command tx timeout [ 359.757729][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.766529][ T6381] device bridge_slave_1 entered promiscuous mode [ 359.775590][ T6404] loop3: detected capacity change from 0 to 2048 [ 359.803267][ T6381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.815876][ T6381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.864138][ T6381] team0: Port device team_slave_0 added [ 359.880060][ T6381] team0: Port device team_slave_1 added [ 359.908056][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.978927][ T6315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.008889][ T6407] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 360.130604][ T6315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.221057][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.231015][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.295292][ T6381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.360282][ T6315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.398075][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.434336][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.513411][ T6381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.690120][ T6411] loop2: detected capacity change from 0 to 1024 [ 360.734853][ T6315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.763750][ T6411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.866581][ T6413] ubi0: attaching mtd0 [ 360.881071][ T6413] ubi0: scanning is finished [ 360.885801][ T6413] ubi0: empty MTD device detected [ 361.260250][ T6413] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 361.268431][ T6413] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 361.275966][ T6413] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 361.283082][ T6413] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 361.293095][ T6413] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 361.294715][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.310690][ T6413] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 361.318741][ T6413] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 549888178 [ 361.328822][ T6413] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 361.338866][ T6415] ubi0: background thread "ubi_bgt0d" started, PID 6415 [ 361.343122][ T6417] loop3: detected capacity change from 0 to 2048 [ 361.441281][ T6381] device hsr_slave_0 entered promiscuous mode [ 362.003942][ T3648] Bluetooth: hci7: command tx timeout [ 362.057311][ T6417] UDF-fs: bad mount option "uid=00000000000000060929" or missing value [ 362.066135][ T6381] device hsr_slave_1 entered promiscuous mode [ 362.090444][ T6381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.098963][ T6381] Cannot create hsr debugfs directory [ 362.314318][ T3625] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 363.343781][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.460293][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.478855][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.708568][ T6434] loop0: detected capacity change from 0 to 1764 [ 364.255996][ T3648] Bluetooth: hci7: command tx timeout [ 364.283799][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.499218][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.521655][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.697537][ T3813] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.704724][ T3813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.984632][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.105057][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.220564][ T3813] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.228057][ T3813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.242313][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.392367][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.534617][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.550056][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.596284][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.738971][ T6423] loop2: detected capacity change from 0 to 8192 [ 366.072906][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.250132][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.251050][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.258746][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.259334][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.328111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.328749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.341651][ T6315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.515761][ T3648] Bluetooth: hci7: command tx timeout [ 366.746848][ T6381] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.300142][ T6475] tipc: Started in network mode [ 367.300315][ T6475] tipc: Node identity 7f000001, cluster identity 4711 [ 367.306744][ T6475] tipc: Enabled bearer , priority 10 [ 367.578766][ T6485] loop2: detected capacity change from 0 to 16 [ 367.589843][ T6485] erofs: (device loop2): mounted with root inode @ nid 36. [ 367.685158][ T6381] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.694481][ T6381] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.702435][ T6381] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.816653][ C1] eth0: bad gso: type: 1, size: 1408 [ 367.827917][ T6490] syz.2.512: attempt to access beyond end of device [ 367.827917][ T6490] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 368.493590][ T14] tipc: Node number set to 2130706433 [ 368.784643][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 368.952482][ T6509] rdma_op ffff88802295d9f0 conn xmit_rdma 0000000000000000 [ 368.964205][ T6509] netlink: 6 bytes leftover after parsing attributes in process `syz.0.515'. [ 369.868820][ T6509] netlink: 6 bytes leftover after parsing attributes in process `syz.0.515'. [ 369.993343][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.005315][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.033455][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.775202][ T6381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.792147][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.801796][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.815510][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.824466][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.835643][ T6381] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.862244][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.871575][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.880691][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.887831][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.896617][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.910690][ T11] device hsr_slave_0 left promiscuous mode [ 371.918747][ T11] device hsr_slave_1 left promiscuous mode [ 371.925145][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.933087][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.941646][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.949567][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.981310][ T11] device bridge_slave_1 left promiscuous mode [ 371.990962][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.009395][ T11] device bridge_slave_0 left promiscuous mode [ 372.021132][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.086630][ T11] device veth1_macvtap left promiscuous mode [ 372.093078][ T11] device veth0_macvtap left promiscuous mode [ 372.099175][ T11] device veth1_vlan left promiscuous mode [ 372.105188][ T11] device veth0_vlan left promiscuous mode [ 372.573972][ T11] team0 (unregistering): Port device team_slave_1 removed [ 372.618718][ T11] team0 (unregistering): Port device team_slave_0 removed [ 372.659703][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.709059][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.182739][ T11] bond0 (unregistering): Released all slaves [ 373.272582][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.282170][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.290617][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.297959][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.305919][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.317458][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.333715][ T6315] device veth0_vlan entered promiscuous mode [ 373.343988][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.353704][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.364450][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.380609][ T6315] device veth1_vlan entered promiscuous mode [ 373.394961][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.412995][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.435215][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.453119][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.462181][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.471783][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.494386][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.503875][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.512667][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.534553][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.549287][ T6381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.567466][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.581438][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.604070][ T6315] device veth0_macvtap entered promiscuous mode [ 373.646313][ T6315] device veth1_macvtap entered promiscuous mode [ 373.696054][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.783703][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.798193][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.822328][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.832203][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.842768][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.852987][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.863610][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.873810][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.884617][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.901981][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.917679][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.928908][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.939128][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.949599][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.959630][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.971822][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.981907][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.992451][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.002336][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.013216][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.025690][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.034950][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.043809][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.052862][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.062204][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.083958][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.092556][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.113708][ T6315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.122616][ T6315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.132870][ T6315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.143188][ T6315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.159943][ T6381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.166982][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.175390][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.276541][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.285877][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.315866][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.367525][ T3820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.388975][ T3820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.423221][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 374.595725][ T6537] loop2: detected capacity change from 0 to 16 [ 374.603062][ T6539] loop0: detected capacity change from 0 to 512 [ 374.641199][ T6537] erofs: (device loop2): mounted with root inode @ nid 36. [ 374.646560][ T6543] loop1: detected capacity change from 0 to 1024 [ 374.672693][ T6542] device wireguard0 entered promiscuous mode [ 374.687703][ T6537] syz.2.530: attempt to access beyond end of device [ 374.687703][ T6537] loop2: rw=0, sector=3489784, nr_sectors = 8 limit=16 [ 374.719311][ T6543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.410455][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.422279][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.482925][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.494566][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.526049][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.669503][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.819234][ T6558] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 376.827298][ T6558] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 376.836268][ T6558] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 376.844190][ T6558] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 377.628676][ T6381] device veth0_vlan entered promiscuous mode [ 377.661866][ T6553] loop2: detected capacity change from 0 to 512 [ 377.726430][ T6381] device veth1_vlan entered promiscuous mode [ 377.760669][ T6553] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 377.839767][ T6553] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 377.848336][ T6381] device veth0_macvtap entered promiscuous mode [ 378.147713][ T6381] device veth1_macvtap entered promiscuous mode [ 378.692138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.724995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.973643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.429156][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.457068][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.467892][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.479392][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.489609][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.499616][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.508517][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 379.516371][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.564293][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.586728][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.596585][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.618338][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.628318][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.639223][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.660733][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.692568][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.718545][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.748806][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.794813][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.809374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.825853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.845711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.883016][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.954586][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.964592][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.007945][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.029340][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.052705][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.082604][ T6573] loop1: detected capacity change from 0 to 32768 [ 380.084644][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.117877][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.140224][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.164467][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.185961][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.209082][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.337199][ T4386] EXT4-fs (loop2): unmounting filesystem. [ 380.376226][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.812850][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.822776][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.847729][ T6381] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.876065][ T6381] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.927298][ T6381] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.951329][ T6381] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.322327][ T6600] netlink: 180 bytes leftover after parsing attributes in process `syz.3.535'. [ 381.780433][ T3648] Bluetooth: hci4: command tx timeout [ 381.825673][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.907346][ T6603] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 381.988838][ T6597] netem: change failed [ 381.989733][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.003671][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.054136][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.109139][ T6606] loop3: detected capacity change from 0 to 1024 [ 382.124498][ T6606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.363126][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.414475][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.454567][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.565291][ T6611] loop1: detected capacity change from 0 to 164 [ 382.579626][ T6589] loop2: detected capacity change from 0 to 32768 [ 382.608486][ T6570] chnl_net:caif_netlink_parms(): no params data found [ 382.627496][ T6611] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 382.663507][ T3637] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 382.668145][ T6616] loop4: detected capacity change from 0 to 2048 [ 382.691063][ T6616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.710468][ T6589] XFS (loop2): Mounting V5 Filesystem [ 382.822034][ T27] audit: type=1800 audit(1724709725.814:60): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.491" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 382.932086][ T6589] XFS (loop2): Ending clean mount [ 382.959206][ T6589] XFS (loop2): Quotacheck needed: Please wait. [ 382.978599][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.179998][ T6589] XFS (loop2): Quotacheck: Done. [ 383.265412][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.319866][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.353253][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.384289][ T6570] device bridge_slave_0 entered promiscuous mode [ 383.465851][ T4386] XFS (loop2): Unmounting Filesystem [ 383.484589][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.500399][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.507538][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.517001][ T6570] device bridge_slave_1 entered promiscuous mode [ 383.589958][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.781472][ T6636] loop1: detected capacity change from 0 to 512 [ 383.812366][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.904735][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.928800][ T6636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 383.971832][ T6636] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 384.018647][ T3637] Bluetooth: hci4: command tx timeout [ 384.035050][ T6570] team0: Port device team_slave_0 added [ 384.060341][ T6570] team0: Port device team_slave_1 added [ 384.201946][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 384.286066][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.471632][ T6647] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 384.743825][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.833315][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.875785][ T6315] EXT4-fs (loop1): unmounting filesystem. [ 384.933407][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.950316][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.024950][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.133821][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.163805][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.224631][ T6653] loop1: detected capacity change from 0 to 1024 [ 385.557027][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.699590][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.855940][ T14] usb 3-1: config 0 descriptor?? [ 385.891487][ T11] tipc: Disabling bearer [ 385.910346][ T11] tipc: Left network mode [ 385.926259][ T6570] device hsr_slave_0 entered promiscuous mode [ 385.940689][ T6570] device hsr_slave_1 entered promiscuous mode [ 385.965288][ T6655] loop3: detected capacity change from 0 to 1024 [ 386.009300][ T4707] hfsplus: b-tree write err: -5, ino 4 [ 386.064767][ T6655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.223502][ T6641] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.272373][ T3648] Bluetooth: hci4: command tx timeout [ 386.433858][ T6664] loop2: detected capacity change from 0 to 8 [ 386.916692][ T6676] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 387.491353][ T14] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.520433][ T14] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.538063][ T14] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 387.617082][ T14] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 387.792816][ T6690] loop1: detected capacity change from 0 to 1024 [ 387.855360][ T6690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.930123][ T6695] loop3: detected capacity change from 0 to 1024 [ 388.029694][ T2621] usb 3-1: USB disconnect, device number 9 [ 388.185098][ T6695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.000528][ T3648] Bluetooth: hci4: command tx timeout [ 392.081222][ T6717] loop4: detected capacity change from 0 to 256 [ 392.429362][ T6710] loop3: detected capacity change from 0 to 4096 [ 392.526464][ T6710] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 394.013116][ T6740] loop1: detected capacity change from 0 to 1024 [ 394.060469][ T6740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.310944][ T6570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.341751][ T6570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.487789][ T6570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.512158][ T6570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.663331][ T6756] loop2: detected capacity change from 0 to 512 [ 394.743769][ T6756] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.559: invalid indirect mapped block 256 (level 2) [ 394.809794][ T6756] EXT4-fs (loop2): 2 truncates cleaned up [ 394.815669][ T6756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 394.840904][ T4541] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 394.993482][ T4386] EXT4-fs (loop2): unmounting filesystem. [ 395.109286][ T6766] loop1: detected capacity change from 0 to 1024 [ 395.122904][ T4541] usb 4-1: Using ep0 maxpacket: 16 [ 395.202634][ T6770] loop2: detected capacity change from 0 to 1024 [ 395.241636][ T6766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.328020][ T6770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.612179][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.651946][ T4541] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 395.675995][ T4541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.738641][ T4541] usb 4-1: Product: syz [ 395.755065][ T4541] usb 4-1: Manufacturer: syz [ 395.763872][ T4541] usb 4-1: SerialNumber: syz [ 395.806329][ T4541] usb 4-1: config 0 descriptor?? [ 395.866276][ T4541] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 396.229474][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.236451][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.245676][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.345066][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.359085][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.390187][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.397485][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.423843][ T6790] loop2: detected capacity change from 0 to 8 [ 396.449634][ T6790] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 396.465750][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.572277][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.583940][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.591122][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.601400][ T6550] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 396.609480][ T6746] program syz.3.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.623194][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.632454][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.641554][ T4541] gp8psk: usb out operation failed. [ 396.646878][ T4541] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.686114][ T4541] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 396.771867][ T6793] cramfs: Error -5 while decompressing! [ 396.777872][ T6793] cramfs: ffffffff920c4568(26)->ffff88804d39a000(4096) [ 396.785037][ T6793] cramfs: Error -3 while decompressing! [ 396.790685][ T6793] cramfs: ffffffff920c4582(26)->ffff888050433000(4096) [ 396.797752][ T6793] cramfs: Error -3 while decompressing! [ 396.803406][ T6793] cramfs: ffffffff920c459c(16)->ffff8880524dc000(4096) [ 396.823150][ T6793] cramfs: Error -5 while decompressing! [ 396.828880][ T6793] cramfs: ffffffff920c4568(26)->ffff88804d39a000(4096) [ 396.964685][ T27] audit: type=1800 audit(1724709738.764:61): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.565" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 396.987395][ T6550] usb 2-1: Using ep0 maxpacket: 8 [ 397.096274][ T4541] usb 4-1: media controller created [ 397.115862][ T4541] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.138255][ T6550] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=13.13 [ 397.139532][ T4541] gp8psk_fe: Frontend revision 1 attached [ 397.157769][ T4541] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 397.159547][ T6550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.176998][ T4541] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 397.183645][ T6550] usb 2-1: config 0 descriptor?? [ 397.236931][ T6550] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 397.261639][ T6791] device bridge0 entered promiscuous mode [ 397.268056][ T6791] device vlan2 entered promiscuous mode [ 397.275753][ T6791] bridge0: port 3(vlan2) entered blocking state [ 397.282712][ T6791] bridge0: port 3(vlan2) entered disabled state [ 397.296607][ T6791] device bridge0 left promiscuous mode [ 397.392971][ T4541] gp8psk: usb in 138 operation failed. [ 397.400422][ T4541] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 397.410849][ T4541] gp8psk: found Genpix USB device pID = 201 (hex) [ 397.417587][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.429391][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.438607][ T4541] usb 4-1: USB disconnect, device number 11 [ 397.450921][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.505045][ T6570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.623067][ T6570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.712589][ T6797] loop2: detected capacity change from 0 to 256 [ 398.087672][ T4541] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 398.148302][ T6797] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 398.299661][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.300541][ T6804] loop3: detected capacity change from 0 to 512 [ 398.321162][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.330410][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.339041][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.348101][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.357131][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.366110][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.387700][ T6811] loop4: detected capacity change from 0 to 164 [ 398.395688][ T6804] EXT4-fs (loop3): 1 orphan inode deleted [ 398.399944][ T6811] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=164 [ 398.416168][ T6804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 398.428547][ T11] device hsr_slave_0 left promiscuous mode [ 398.440988][ T6804] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038 (0x7fffffff) [ 398.462054][ T11] device hsr_slave_1 left promiscuous mode [ 398.484683][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.520169][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.538586][ T4386] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005) [ 398.564938][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.572859][ T4386] exFAT-fs (loop2): Filesystem has been set read-only [ 398.579971][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.594707][ T4386] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005) [ 398.613704][ T11] device bridge_slave_1 left promiscuous mode [ 398.630934][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.674969][ T11] device bridge_slave_0 left promiscuous mode [ 398.746240][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.770557][ T11] device hsr_slave_0 left promiscuous mode [ 398.865072][ T11] device hsr_slave_1 left promiscuous mode [ 398.888947][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.986861][ T6817] sg_write: data in/out 196608/16 bytes for SCSI command 0xdb-- guessing data in; [ 398.986861][ T6817] program syz.4.570 not setting count and/or reply_len properly [ 399.199732][ T6821] loop4: detected capacity change from 0 to 128 [ 399.530061][ T6821] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 399.547575][ T3076] bcm5974 2-1:0.0: could not read from device [ 399.746117][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.871505][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.886840][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.894749][ T11] device bridge_slave_1 left promiscuous mode [ 399.901287][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.909941][ T11] device bridge_slave_0 left promiscuous mode [ 399.916582][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.979031][ T3076] bcm5974 2-1:0.0: could not read from device [ 399.999266][ T6550] usb 2-1: USB disconnect, device number 12 [ 400.030128][ T4251] bcm5974 2-1:0.0: could not read from device [ 400.040706][ T3652] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.076752][ T3633] EXT4-fs (loop3): unmounting filesystem. [ 400.156999][ T4251] udevd[4251]: Error opening device "/dev/input/event4": No such file or directory [ 400.174557][ T4251] udevd[4251]: Unable to EVIOCGABS device "/dev/input/event4" [ 400.210386][ T4251] udevd[4251]: Unable to EVIOCGABS device "/dev/input/event4" [ 400.222389][ T4251] udevd[4251]: Unable to EVIOCGABS device "/dev/input/event4" [ 400.269566][ T4251] udevd[4251]: Unable to EVIOCGABS device "/dev/input/event4" [ 400.289866][ T11] device veth1_macvtap left promiscuous mode [ 400.309905][ T11] device veth0_macvtap left promiscuous mode [ 400.329547][ T11] device veth1_vlan left promiscuous mode [ 400.330506][ T6828] loop3: detected capacity change from 0 to 2048 [ 400.342836][ T11] device veth0_vlan left promiscuous mode [ 400.570086][ T6828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.838392][ T11] device veth1_macvtap left promiscuous mode [ 401.870123][ T11] device veth0_macvtap left promiscuous mode [ 401.876746][ T11] device veth1_vlan left promiscuous mode [ 401.893509][ T11] device veth0_vlan left promiscuous mode [ 402.709297][ T6837] loop3: detected capacity change from 0 to 1024 [ 402.827884][ T6837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.871354][ T6839] loop1: detected capacity change from 0 to 512 [ 403.004078][ T6839] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.575: corrupted inode contents [ 403.031235][ T6839] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #3: comm syz.1.575: mark_inode_dirty error [ 403.095868][ T6839] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.575: corrupted inode contents [ 403.120431][ T6839] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.575: mark_inode_dirty error [ 403.177262][ T6839] Quota error (device loop1): write_blk: dquota write failed [ 403.195808][ T6839] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 403.220240][ T6839] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.575: Failed to acquire dquot type 0 [ 403.256645][ T6839] EXT4-fs (loop1): 1 orphan inode deleted [ 403.268368][ T6839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 403.300818][ T6839] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 403.542984][ T3813] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 403.555642][ T3813] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 1 [ 404.447526][ T6315] EXT4-fs (loop1): unmounting filesystem. [ 404.602058][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 404.845948][ T11] team0 (unregistering): Port device team_slave_1 removed [ 404.884249][ T6862] xt_hashlimit: overflow, rate too high: 0 [ 405.359663][ T11] team0 (unregistering): Port device team_slave_0 removed [ 405.561155][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.615406][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.787296][ T11] bond0 (unregistering): Released all slaves [ 406.933043][ T11] team0 (unregistering): Port device batadv1 removed [ 406.988202][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.994550][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 407.816353][ T11] team0 (unregistering): Port device team_slave_1 removed [ 407.874531][ T11] team0 (unregistering): Port device team_slave_0 removed [ 407.916216][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.964589][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.410675][ T11] bond0 (unregistering): Released all slaves [ 408.502624][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.706666][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.728763][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.774679][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.888446][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.901482][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.933142][ T6885] loop3: detected capacity change from 0 to 1024 [ 408.965194][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.983252][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.993701][ T6885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.006162][ T6570] device veth0_vlan entered promiscuous mode [ 409.014746][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.029051][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.166578][ T6570] device veth1_vlan entered promiscuous mode [ 409.196292][ T6550] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 409.282507][ T6570] device veth0_macvtap entered promiscuous mode [ 409.293110][ T6570] device veth1_macvtap entered promiscuous mode [ 409.316366][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.347898][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.385897][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.422686][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.453611][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.488056][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.529424][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.579389][ T6882] loop4: detected capacity change from 0 to 1024 [ 409.588591][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.600458][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.608659][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.661181][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 409.686978][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.695791][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.704578][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.714788][ T3637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.719999][ T6882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.733699][ T3637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.735857][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.756477][ T3637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.769232][ T3637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.777248][ T3637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 409.786413][ T3637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.833963][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.861929][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.891603][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.905024][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.915625][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.926182][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.952284][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.040798][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.108125][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.118902][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.128779][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.139537][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.150858][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.231885][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 410.814188][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.840052][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.859735][ T6570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.870363][ T6570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.880631][ T6570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.948841][ T6570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.166447][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.267959][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.336529][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.372964][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.449158][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.492879][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.591929][ T6891] chnl_net:caif_netlink_parms(): no params data found [ 411.695195][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.702733][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.711100][ T6891] device bridge_slave_0 entered promiscuous mode [ 411.728952][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.736496][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.756043][ T6891] device bridge_slave_1 entered promiscuous mode [ 411.786219][ T6910] 9pnet_fd: Insufficient options for proto=fd [ 412.101702][ T3637] Bluetooth: hci2: command tx timeout [ 412.592142][ T6891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.598155][ T6550] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.604515][ T6381] EXT4-fs (loop4): unmounting filesystem. [ 412.739076][ T6550] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 412.772337][ T6891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.783155][ T6550] usb 5-1: can't read configurations, error -71 [ 414.167287][ T6921] xt_hashlimit: overflow, rate too high: 0 [ 414.205317][ T6891] team0: Port device team_slave_0 added [ 414.249719][ T6891] team0: Port device team_slave_1 added [ 414.353506][ T3648] Bluetooth: hci2: command tx timeout [ 414.375139][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.382216][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.824189][ T6936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.021091][ T6891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.112623][ T6938] loop1: detected capacity change from 0 to 256 [ 415.209236][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 415.361959][ T27] audit: type=1804 audit(1724709755.849:62): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.596" name="/newroot/26/file1/file0" dev="loop1" ino=1048689 res=1 errno=0 [ 415.369328][ T6942] loop4: detected capacity change from 0 to 2048 [ 415.422795][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.436331][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.460102][ T6945] loop3: detected capacity change from 0 to 764 [ 415.487910][ T6942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.581413][ T6891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.617944][ T3648] Bluetooth: hci2: command tx timeout [ 416.915023][ T6891] device hsr_slave_0 entered promiscuous mode [ 416.954882][ T6891] device hsr_slave_1 entered promiscuous mode [ 416.978094][ T6891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.004043][ T6957] loop0: detected capacity change from 0 to 128 [ 417.004893][ T6891] Cannot create hsr debugfs directory [ 417.040365][ T6435] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 417.422560][ T6891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.433698][ T4549] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 417.441174][ T6435] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.441200][ T6435] usb 4-1: config 1 has no interface number 0 [ 417.441229][ T6435] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.441253][ T6435] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 417.441304][ T6435] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 417.608285][ T6891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.722879][ T6435] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.724107][ T6891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.732131][ T6435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.732154][ T6435] usb 4-1: Product: syz [ 417.766139][ T4549] usb 5-1: Using ep0 maxpacket: 32 [ 417.804037][ T6435] usb 4-1: Manufacturer: syz [ 417.808683][ T6435] usb 4-1: SerialNumber: syz [ 417.854760][ T6891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.860755][ T6957] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 417.918026][ T4549] usb 5-1: config 0 has no interfaces? [ 418.119246][ T6891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.129571][ T6891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.140053][ T6891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.193565][ T6891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.232119][ T4549] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 418.251487][ T4549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.327405][ T6968] loop1: detected capacity change from 0 to 16 [ 418.392049][ T4549] usb 5-1: Product: syz [ 418.440323][ T6968] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 418.572394][ T6967] loop0: detected capacity change from 0 to 256 [ 418.585590][ T4549] usb 5-1: Manufacturer: syz [ 418.653891][ T4549] usb 5-1: SerialNumber: syz [ 418.842467][ T4549] usb 5-1: config 0 descriptor?? [ 418.860447][ T3648] Bluetooth: hci2: command tx timeout [ 418.939615][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.978256][ T6891] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.078360][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 419.097373][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.105831][ T6953] netlink: 224 bytes leftover after parsing attributes in process `syz.3.600'. [ 419.140571][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.265394][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.352985][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.360161][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.403447][ T6435] cdc_ncm 4-1:1.1: bind() failure [ 419.475882][ T4549] usb 5-1: USB disconnect, device number 6 [ 419.543502][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.586369][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.613456][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.620596][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.650725][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 419.674812][ T6978] xt_CT: No such helper "snmp_trap" [ 419.686390][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.704300][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 419.722220][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 419.736349][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 419.753413][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 419.764413][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 419.773398][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 419.782728][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.791649][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 419.806104][ T6891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.829306][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 419.845960][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 419.906137][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 419.920618][ T6435] usb 4-1: USB disconnect, device number 12 [ 419.961199][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.167138][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.188147][ T3648] Bluetooth: hci5: sending frame failed (-49) [ 422.198305][ T3637] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 422.229525][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.258437][ T6891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.339986][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.353429][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.374256][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 422.403493][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.426569][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.448028][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.502032][ T6891] device veth0_vlan entered promiscuous mode [ 422.556714][ T7015] loop0: detected capacity change from 0 to 1024 [ 422.557787][ T6891] device veth1_vlan entered promiscuous mode [ 422.564528][ T7014] loop1: detected capacity change from 0 to 512 [ 422.590319][ T7017] loop4: detected capacity change from 0 to 1024 [ 422.620257][ T7015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.651189][ T7014] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 422.675740][ T7017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.337852][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.355207][ T7014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 423.360317][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.372176][ T7014] ext4 filesystem being mounted at /30/control supports timestamps until 2038 (0x7fffffff) [ 423.425932][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.631644][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.711564][ T6891] device veth0_macvtap entered promiscuous mode [ 423.731947][ T7026] syz.1.622[7026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.732409][ T7026] syz.1.622[7026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.765975][ T7026] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.622: path /30/control: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 424.325921][ T6891] device veth1_macvtap entered promiscuous mode [ 424.352869][ T6315] EXT4-fs (loop1): unmounting filesystem. [ 424.412082][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.424380][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.465565][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.476400][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.488530][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.500718][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.511801][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.522787][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.532892][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.544846][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.558947][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.574031][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 424.584112][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 424.593533][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.602212][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.616753][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.630849][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.643722][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.645942][ T6435] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 424.669788][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.679769][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.690304][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.700460][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.705491][ T7038] loop3: detected capacity change from 0 to 1024 [ 424.711201][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.729490][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.740429][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.750832][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.754146][ T4541] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 424.762028][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.779411][ T7038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.789757][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.801220][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.887913][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.956184][ T6891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.982023][ T7040] loop4: detected capacity change from 0 to 64 [ 424.988780][ T6891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.002336][ T6891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.011697][ T6891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.198623][ T4541] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 425.230784][ T4541] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 425.241087][ T4541] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 425.284936][ T4541] usb 2-1: config 1 has no interface number 1 [ 425.369754][ T6435] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.380163][ T6435] usb 1-1: config 0 has no interfaces? [ 425.385763][ T6435] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 425.395553][ T6435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.407023][ T6435] usb 1-1: config 0 descriptor?? [ 426.375923][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.443573][ T4541] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 426.509056][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.626956][ T7031] loop0: detected capacity change from 0 to 256 [ 426.646444][ T4541] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 426.691153][ T7031] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 426.731023][ T7031] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 426.745788][ T7031] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 426.763105][ T7031] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 426.919076][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.919714][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 426.979213][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.016975][ T7052] loop4: detected capacity change from 0 to 1024 [ 427.022027][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.050821][ T7052] EXT4-fs: Ignoring removed orlov option [ 427.063274][ T4541] usb 2-1: string descriptor 0 read error: -22 [ 427.080713][ T4541] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.105557][ T7052] EXT4-fs (loop4): Test dummy encryption mode enabled [ 427.110185][ T4541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.164598][ T7052] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 427.291680][ T4541] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 427.458546][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.469610][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.245317][ T4541] usb 2-1: USB disconnect, device number 13 [ 428.245980][ T14] usb 1-1: USB disconnect, device number 5 [ 428.264451][ T4549] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 428.283471][ T6381] EXT4-fs (loop4): unmounting filesystem. [ 428.292949][ T6570] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 428.413432][ T7067] loop2: detected capacity change from 0 to 1024 [ 428.416933][ T7069] loop0: detected capacity change from 0 to 512 [ 428.432392][ T7067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.460341][ T7069] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 428.622743][ T7069] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 428.642687][ T4549] usb 4-1: Using ep0 maxpacket: 32 [ 428.644586][ T7069] EXT4-fs (loop0): 1 truncate cleaned up [ 429.124969][ T7075] loop4: detected capacity change from 0 to 2048 [ 429.693884][ T7075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.716362][ T7069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 429.817512][ T27] audit: type=1804 audit(1724709769.168:63): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.626" name="/newroot/9/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 429.868266][ T4549] usb 4-1: config 0 has no interfaces? [ 429.881426][ T7078] loop2: detected capacity change from 0 to 512 [ 429.899467][ T27] audit: type=1804 audit(1724709769.177:64): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.626" name="/newroot/9/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 429.966410][ T7078] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 429.993791][ T7078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 430.025837][ T7078] ext4 filesystem being mounted at /2/control supports timestamps until 2038 (0x7fffffff) [ 430.041774][ T6570] EXT4-fs (loop0): unmounting filesystem. [ 430.073986][ T4549] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 430.083217][ T4549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.092551][ T4549] usb 4-1: Product: syz [ 430.097469][ T4549] usb 4-1: Manufacturer: syz [ 430.102168][ T4549] usb 4-1: SerialNumber: syz [ 430.275886][ T7084] syz.2.627[7084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.275989][ T7084] syz.2.627[7084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.289863][ T7084] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.627: path /2/control: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 430.431958][ T4549] usb 4-1: config 0 descriptor?? [ 430.659006][ T4549] usb 4-1: can't set config #0, error -71 [ 430.674489][ T4549] usb 4-1: USB disconnect, device number 13 [ 431.420213][ T7089] loop0: detected capacity change from 0 to 1024 [ 431.927342][ T7089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.077707][ T7097] loop1: detected capacity change from 0 to 512 [ 432.138123][ T7099] loop4: detected capacity change from 0 to 512 [ 432.198961][ T6891] EXT4-fs (loop2): unmounting filesystem. [ 432.210004][ T7097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 432.221387][ T7099] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.632: bg 0: block 131: padding at end of block bitmap is not set [ 432.280910][ T7097] ext4 filesystem being mounted at /33/bus supports timestamps until 2038 (0x7fffffff) [ 432.331177][ T7099] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 432.365639][ T7099] EXT4-fs (loop4): 1 truncate cleaned up [ 432.492734][ T7099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 433.127108][ T6315] EXT4-fs (loop1): unmounting filesystem. [ 433.337190][ T6381] EXT4-fs (loop4): unmounting filesystem. [ 434.043772][ T7139] loop4: detected capacity change from 0 to 512 [ 434.070093][ T7139] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 434.137939][ T3652] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 434.210209][ T7143] loop1: detected capacity change from 0 to 1024 [ 434.241904][ T7143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.394913][ T7157] loop3: detected capacity change from 0 to 512 [ 436.071667][ T7157] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.648: corrupted inode contents [ 436.210639][ T7157] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #3: comm syz.3.648: mark_inode_dirty error [ 436.780451][ T7157] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.648: corrupted inode contents [ 436.826236][ T7157] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.648: mark_inode_dirty error [ 437.892467][ T7177] loop2: detected capacity change from 0 to 2048 [ 437.900300][ T7157] Quota error (device loop3): write_blk: dquota write failed [ 437.928638][ T7157] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 437.957919][ T7157] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.648: Failed to acquire dquot type 0 [ 437.993018][ T7157] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.648: corrupted inode contents [ 438.034699][ T7157] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #16: comm syz.3.648: mark_inode_dirty error [ 438.059650][ T7157] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.648: corrupted inode contents [ 438.095366][ T7157] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.648: mark_inode_dirty error [ 438.134661][ T6435] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 438.236991][ T7157] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.648: corrupted inode contents [ 438.427052][ T6435] usb 1-1: Using ep0 maxpacket: 32 [ 438.736045][ T7157] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 438.879890][ T7157] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #16: comm syz.3.648: corrupted inode contents [ 439.010719][ T6435] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 439.049601][ T7157] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.648: mark_inode_dirty error [ 439.070062][ T6435] usb 1-1: can't read configurations, error -71 [ 439.279138][ T7157] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 439.337643][ T7157] EXT4-fs (loop3): 1 truncate cleaned up [ 439.477955][ T7157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 439.495990][ T7157] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038 (0x7fffffff) [ 439.532849][ T7189] loop4: detected capacity change from 0 to 8 [ 439.553979][ T3633] EXT4-fs (loop3): unmounting filesystem. [ 439.642281][ T7192] loop3: detected capacity change from 0 to 1024 [ 439.654144][ T7192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.943361][ T7190] loop1: detected capacity change from 0 to 1024 [ 440.261340][ T7196] loop0: detected capacity change from 0 to 1024 [ 440.277001][ T7196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.289797][ T7190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c02c, mo2=0003] [ 440.326039][ T7201] loop2: detected capacity change from 0 to 1024 [ 440.333619][ T7190] System zones: 0-1, 3-36 [ 440.347276][ T7190] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 440.443144][ T7201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.896951][ T6315] EXT4-fs (loop1): unmounting filesystem. [ 442.622324][ T7215] loop2: detected capacity change from 0 to 1024 [ 442.651052][ T7216] loop3: detected capacity change from 0 to 1024 [ 442.770113][ T7216] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)! [ 442.783237][ T7215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.792375][ T7216] EXT4-fs (loop3): group descriptors corrupted! [ 442.875319][ T7225] No such timeout policy "syz0" [ 442.992690][ T4251] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.926457][ T7249] loop2: detected capacity change from 0 to 256 [ 447.951395][ T7249] exfat: Bad value for 'umask' [ 448.006020][ T7244] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.055423][ T7249] loop2: detected capacity change from 0 to 1024 [ 448.110245][ T7255] loop1: detected capacity change from 0 to 2048 [ 448.176006][ T7249] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00cc02c, mo2=0002] [ 448.188944][ T7249] System zones: 0-1, 3-36 [ 448.218081][ T7249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 449.513190][ T6891] EXT4-fs (loop2): unmounting filesystem. [ 449.555151][ T7275] loop3: detected capacity change from 0 to 256 [ 449.585664][ T7275] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.620357][ T7275] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 449.639822][ T7252] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1368: i_size: 4096 lbcount: 8192 extent 65+4608 [ 449.650325][ T7277] loop2: detected capacity change from 0 to 1024 [ 449.744044][ T7275] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 449.785603][ T7277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.853948][ T27] audit: type=1326 audit(1724709787.692:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.3.672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff84ab79e79 code=0x0 [ 451.362583][ T7292] netlink: 200 bytes leftover after parsing attributes in process `syz.2.684'. [ 451.833249][ T7289] loop1: detected capacity change from 0 to 1024 [ 451.896852][ T7289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.626158][ T7307] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.679'. [ 453.627076][ T7304] loop2: detected capacity change from 0 to 256 [ 453.748109][ T7304] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 453.980454][ T7310] loop1: detected capacity change from 0 to 512 [ 454.066128][ T7310] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 454.132199][ T7310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 454.145297][ T7310] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.681: casefold flag without casefold feature [ 454.160524][ T7310] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.681: unexpected EA_INODE flag [ 454.249112][ T7310] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.681: couldn't read orphan inode 16 (err -117) [ 454.277975][ T3637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.293956][ T7310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 454.311782][ T3637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.322068][ T3637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.332391][ T3637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.340864][ T3637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 454.348994][ T3637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.495683][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.142905][ T6315] EXT4-fs (loop1): unmounting filesystem. [ 455.386410][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.500957][ T7324] syz.2.685 sent an empty control message without MSG_MORE. [ 456.242774][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.399482][ T7325] IPVS: Error connecting to the multicast addr [ 456.520482][ T7332] loop2: detected capacity change from 0 to 8 [ 456.563606][ T3648] Bluetooth: hci4: command tx timeout [ 457.163725][ T7333] ubi: mtd0 is already attached to ubi0 [ 457.216375][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.400456][ T7336] loop3: detected capacity change from 0 to 1024 [ 457.455988][ T7336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.632890][ T7313] chnl_net:caif_netlink_parms(): no params data found [ 460.370599][ T3637] Bluetooth: hci4: command tx timeout [ 460.933988][ T7356] loop4: detected capacity change from 0 to 512 [ 461.755356][ T7353] loop3: detected capacity change from 0 to 1024 [ 461.762665][ T7356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 461.770820][ T7356] System zones: 1-12 [ 461.775584][ T7356] EXT4-fs (loop4): orphan cleanup on readonly fs [ 461.785706][ T7356] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.691: bg 0: block 328: padding at end of block bitmap is not set [ 461.804414][ T7356] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 461.814554][ T7356] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.691: invalid indirect mapped block 65280 (level 0) [ 461.829525][ T7356] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.691: attempt to clear invalid blocks 33619980 len 1 [ 461.843680][ T7356] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.691: invalid indirect mapped block 1819239214 (level 0) [ 461.858456][ T7356] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.691: invalid indirect mapped block 1819239214 (level 1) [ 461.874301][ T7356] EXT4-fs (loop4): 1 orphan inode deleted [ 461.880050][ T7356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 462.123287][ T6381] EXT4-fs (loop4): unmounting filesystem. [ 462.168931][ T3743] hfsplus: b-tree write err: -5, ino 4 [ 462.300233][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.325548][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.353059][ T7367] loop4: detected capacity change from 0 to 512 [ 462.404959][ T7313] device bridge_slave_0 entered promiscuous mode [ 462.543962][ T3637] Bluetooth: hci4: command tx timeout [ 462.662257][ T7367] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 462.697327][ T7367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 462.747324][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.755104][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.759345][ T7367] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.694: casefold flag without casefold feature [ 462.809552][ T7313] device bridge_slave_1 entered promiscuous mode [ 462.901809][ T7367] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.694: unexpected EA_INODE flag [ 462.942419][ T7367] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.694: couldn't read orphan inode 16 (err -117) [ 463.074329][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.088067][ T7367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 463.176572][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.486104][ T6381] EXT4-fs (loop4): unmounting filesystem. [ 464.499402][ T7313] team0: Port device team_slave_0 added [ 464.533700][ T7313] team0: Port device team_slave_1 added [ 464.664590][ T7380] loop3: detected capacity change from 0 to 4096 [ 464.723468][ T7380] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (32768) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 464.797725][ T3637] Bluetooth: hci4: command tx timeout [ 464.804807][ T7392] loop4: detected capacity change from 0 to 512 [ 464.935103][ T7392] EXT4-fs (loop4): 1 orphan inode deleted [ 464.964519][ T7392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 465.039423][ T7392] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 465.040797][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.100385][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.329546][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.902805][ T7380] netlink: 'syz.3.698': attribute type 49 has an invalid length. [ 465.914451][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.921598][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.067816][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.102282][ T6381] EXT4-fs (loop4): unmounting filesystem. [ 466.216272][ T7412] loop1: detected capacity change from 0 to 1024 [ 466.299613][ T7412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.094897][ T7313] device hsr_slave_0 entered promiscuous mode [ 467.637096][ T7313] device hsr_slave_1 entered promiscuous mode [ 467.699593][ T7424] loop3: detected capacity change from 0 to 1024 [ 467.706364][ T7313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.737420][ T7313] Cannot create hsr debugfs directory [ 467.755330][ T7424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.990489][ T7429] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 468.069519][ T6435] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 468.124195][ T35] device hsr_slave_0 left promiscuous mode [ 468.141354][ T35] device hsr_slave_1 left promiscuous mode [ 468.156727][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.175522][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.187515][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.208144][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.219772][ T35] device bridge_slave_1 left promiscuous mode [ 468.241034][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.250069][ T35] device bridge_slave_0 left promiscuous mode [ 468.264606][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.308638][ T6550] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 468.352161][ T35] device veth1_macvtap left promiscuous mode [ 468.366161][ T35] device veth0_macvtap left promiscuous mode [ 468.374968][ T35] device veth1_vlan left promiscuous mode [ 468.380848][ T35] device veth0_vlan left promiscuous mode [ 468.381183][ T7439] loop4: detected capacity change from 0 to 512 [ 468.424866][ T7439] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 468.447341][ T7439] EXT4-fs (loop4): 1 truncate cleaned up [ 468.482073][ T6435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 468.486259][ T7439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 468.499198][ T6435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.514052][ T6435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 468.525500][ T6435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.535776][ T6435] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 468.549822][ T6435] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 468.559508][ T6435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.573949][ T6435] usb 2-1: config 0 descriptor?? [ 468.579166][ T6550] usb 3-1: Using ep0 maxpacket: 16 [ 468.721879][ T6550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 468.780488][ T6550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 468.816972][ T6550] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 468.932522][ T6550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.215169][ T6550] usb 3-1: config 0 descriptor?? [ 470.052783][ T6435] ntrig 0003:1B96:000A.000C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 470.149840][ T6435] ntrig 0003:1B96:000A.000C: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 470.233975][ T6381] EXT4-fs (loop4): unmounting filesystem. [ 470.254756][ T7455] loop3: detected capacity change from 0 to 512 [ 470.278992][ T7455] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 470.380252][ T7] usb 2-1: USB disconnect, device number 14 [ 470.503018][ T7455] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 470.601004][ T7463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.612654][ T7463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.592713][ T35] team0 (unregistering): Port device team_slave_1 removed [ 472.638459][ T35] team0 (unregistering): Port device team_slave_0 removed [ 472.687274][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.731333][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.186481][ T35] bond0 (unregistering): Released all slaves [ 473.553810][ T6550] usbhid 3-1:0.0: can't add hid device: -71 [ 473.559847][ T6550] usbhid: probe of 3-1:0.0 failed with error -71 [ 473.566570][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.572865][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.582190][ T7482] loop1: detected capacity change from 0 to 512 [ 473.621443][ T6550] usb 3-1: USB disconnect, device number 10 [ 473.753607][ T7483] loop3: detected capacity change from 0 to 1024 [ 473.803474][ T7482] EXT4-fs: Ignoring removed orlov option [ 473.856560][ T7482] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.000059][ T7483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.034946][ T7482] EXT4-fs: Ignoring removed i_version option [ 474.532155][ T7482] EXT4-fs error (device loop1): __ext4_iget:5055: inode #11: block 1: comm syz.1.722: invalid block [ 475.634035][ T7482] EXT4-fs (loop1): Remounting filesystem read-only [ 475.664278][ T7482] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.722: couldn't read orphan inode 11 (err -117) [ 475.749508][ T7482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 476.687451][ T7506] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.722: Directory hole found for htree leaf block 0 [ 476.722027][ T7506] EXT4-fs (loop1): Remounting filesystem read-only [ 476.747338][ T7503] Cannot find add_set index 0 as target [ 476.779061][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 477.313844][ T6315] EXT4-fs (loop1): unmounting filesystem. [ 477.322953][ T7514] loop2: detected capacity change from 0 to 8 [ 480.799771][ T7521] loop1: detected capacity change from 0 to 1024 [ 480.818991][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.820554][ T7501] netlink: 'syz.4.716': attribute type 12 has an invalid length. [ 481.306942][ T7313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.316149][ T7535] loop3: detected capacity change from 0 to 256 [ 481.328066][ T7313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.352224][ T7313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.364880][ T7535] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 481.388623][ T7313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 481.439042][ T3648] Bluetooth: hci3: command 0x0406 tx timeout [ 482.036277][ T7540] overlayfs: missing 'workdir' [ 482.700035][ T7545] loop1: detected capacity change from 0 to 1024 [ 482.725285][ T7545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.829783][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.915833][ T7551] loop2: detected capacity change from 0 to 128 [ 482.955798][ T4546] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 483.880735][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.093623][ T4546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.143776][ T7313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.166922][ T4546] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 484.234156][ T4546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.255884][ T7313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.279568][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.298418][ T4546] usb 5-1: config 0 descriptor?? [ 484.304693][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.325369][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.344209][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.363752][ T3820] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.370912][ T3820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.401172][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.423629][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.434395][ T3820] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.441550][ T3820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.472777][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.490749][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.521856][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.543145][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.559822][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.590554][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.602512][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 484.623590][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.646911][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.656368][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.679523][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.701479][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.709543][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.864057][ T4546] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 484.917180][ T4546] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000D/input/input15 [ 485.096289][ T4546] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 485.201487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.209008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.239096][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.284018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.296515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.340149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.348522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.385428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.404738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.425400][ T7313] device veth0_vlan entered promiscuous mode [ 485.455968][ T7313] device veth1_vlan entered promiscuous mode [ 485.526253][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 485.545960][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.575186][ T7313] device veth0_macvtap entered promiscuous mode [ 485.593100][ T7313] device veth1_macvtap entered promiscuous mode [ 485.644737][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.663347][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.673747][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.691972][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.703405][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.724716][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.738903][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.759287][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.769517][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.789783][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.801814][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.818266][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 485.827544][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 485.836167][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.845540][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.867779][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.896075][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.906507][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.917384][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.927716][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.940470][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.950842][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.962128][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.973154][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.983971][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.994546][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.005636][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.028219][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.044740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 486.064057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.091221][ T7313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.102695][ T7313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.118141][ T7313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.128122][ T7313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.250690][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.290406][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.300868][ T4707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.326997][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.330442][ T4707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.376129][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.529268][ T7606] loop0: detected capacity change from 0 to 512 [ 486.643196][ T7606] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.676: casefold flag without casefold feature [ 486.673192][ T7606] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.676: missing EA_INODE flag [ 486.700260][ T7606] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.676: error while reading EA inode 2 err=-117 [ 487.010395][ T7606] EXT4-fs (loop0): 1 orphan inode deleted [ 487.124540][ T7606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 487.363609][ T7606] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.676: Directory hole found for htree leaf block 0 [ 487.372723][ T4548] usb 5-1: USB disconnect, device number 7 [ 487.398852][ T7606] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.676: Directory hole found for htree leaf block 0 [ 487.458672][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'. [ 488.396264][ T7313] EXT4-fs (loop0): unmounting filesystem. [ 492.067677][ T4548] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 492.373813][ T7653] loop0: detected capacity change from 0 to 1024 [ 492.909837][ T7653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.134343][ T7659] netlink: 'syz.3.733': attribute type 12 has an invalid length. [ 493.148867][ T7663] loop4: detected capacity change from 0 to 1024 [ 493.157856][ T7660] loop2: detected capacity change from 0 to 512 [ 493.183149][ T7660] EXT4-fs (loop2): bad block size 8192 [ 493.189192][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 493.376379][ T7663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.636743][ T7668] overlayfs: overlapping lowerdir path [ 493.662523][ T3637] Bluetooth: hci7: command 0x0406 tx timeout [ 493.729922][ T7671] loop2: detected capacity change from 0 to 1024 [ 493.749530][ T7671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.825650][ T27] audit: type=1326 audit(1724709828.277:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 493.852278][ T27] audit: type=1326 audit(1724709828.277:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 494.049664][ T27] audit: type=1326 audit(1724709828.277:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 494.589594][ T27] audit: type=1326 audit(1724709828.277:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 495.967026][ T48] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 496.434160][ T27] audit: type=1326 audit(1724709828.277:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 496.434198][ T27] audit: type=1326 audit(1724709828.277:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 496.434224][ T27] audit: type=1326 audit(1724709828.277:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 496.434250][ T27] audit: type=1326 audit(1724709828.277:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 496.434279][ T27] audit: type=1326 audit(1724709828.277:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 496.434305][ T27] audit: type=1326 audit(1724709828.277:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1622379e79 code=0x7fc00000 [ 496.512956][ T7690] loop4: detected capacity change from 0 to 1764 [ 496.514984][ T7690] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 496.515478][ T7690] ISOFS: changing to secondary root [ 498.201891][ T3648] Bluetooth: hci3: link tx timeout [ 498.203680][ T3648] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.204610][ T3648] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 498.204626][ T3648] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3648, name: kworker/u5:5 [ 498.204729][ T3648] preempt_count: 0, expected: 0 [ 498.204873][ T3648] RCU nest depth: 1, expected: 0 [ 498.204884][ T3648] 3 locks held by kworker/u5:5/3648: [ 498.204896][ T3648] #0: ffff888020b35938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 498.204971][ T3648] #1: ffffc90003e8fd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 498.205026][ T3648] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 498.205092][ T3648] CPU: 0 PID: 3648 Comm: kworker/u5:5 Not tainted 6.1.106-syzkaller #0 [ 498.205111][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 498.205122][ T3648] Workqueue: hci3 hci_tx_work [ 498.205147][ T3648] Call Trace: [ 498.205158][ T3648] [ 498.205166][ T3648] dump_stack_lvl+0x1e3/0x2cb [ 498.205191][ T3648] ? nf_tcp_handle_invalid+0x642/0x642 [ 498.205204][ T3648] ? panic+0x764/0x764 [ 498.205214][ T3648] ? preempt_schedule_common+0xa6/0xd0 [ 498.205237][ T3648] __might_resched+0x5cb/0x780 [ 498.205251][ T3648] ? __wake_up_klogd+0x1c/0x100 [ 498.205263][ T3648] ? __might_sleep+0xb0/0xb0 [ 498.205273][ T3648] ? vprintk_emit+0x622/0x740 [ 498.205289][ T3648] ? printk_sprint+0x490/0x490 [ 498.205303][ T3648] ? mark_lock+0x9a/0x340 [ 498.205320][ T3648] __mutex_lock+0xbd/0xd80 [ 498.205339][ T3648] ? _printk+0xd1/0x111 [ 498.205353][ T3648] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 498.205375][ T3648] ? mutex_lock_nested+0x10/0x10 [ 498.205403][ T3648] ? hci_conn_get_phy+0x370/0x370 [ 498.205415][ T3648] hci_cmd_sync_submit+0x3b/0x2e0 [ 498.205430][ T3648] hci_disconnect+0xe6/0x2c0 [ 498.205442][ T3648] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 498.205460][ T3648] ? __lock_acquire+0x1f80/0x1f80 [ 498.205489][ T3648] __check_timeout+0x333/0x460 [ 498.205503][ T3648] ? __check_timeout+0x181/0x460 [ 498.205524][ T3648] hci_tx_work+0x138b/0x1ec0 [ 498.205563][ T3648] ? hci_cmd_work+0x660/0x660 [ 498.205575][ T3648] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 498.205589][ T3648] ? do_raw_spin_unlock+0x137/0x8a0 [ 498.205603][ T3648] ? process_one_work+0x7a9/0x11d0 [ 498.205614][ T3648] process_one_work+0x8a9/0x11d0 [ 498.205639][ T3648] ? worker_detach_from_pool+0x260/0x260 [ 498.205653][ T3648] ? _raw_spin_lock_irqsave+0x120/0x120 [ 498.205664][ T3648] ? kthread_data+0x4e/0xc0 [ 498.205681][ T3648] ? wq_worker_running+0x97/0x190 [ 498.205698][ T3648] worker_thread+0xa47/0x1200 [ 498.205712][ T3648] ? release_firmware_map_entry+0x186/0x186 [ 498.205735][ T3648] kthread+0x28d/0x320 [ 498.205744][ T3648] ? worker_clr_flags+0x190/0x190 [ 498.205754][ T3648] ? kthread_blkcg+0xd0/0xd0 [ 498.205764][ T3648] ret_from_fork+0x1f/0x30 [ 498.205787][ T3648] [ 498.205792][ T3648] [ 498.205795][ T3648] ============================= [ 498.205797][ T3648] [ BUG: Invalid wait context ] [ 498.205800][ T3648] 6.1.106-syzkaller #0 Tainted: G W [ 498.205805][ T3648] ----------------------------- [ 498.205808][ T3648] kworker/u5:5/3648 is trying to lock: [ 498.205813][ T3648] ffff88801bb889b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2e0 [ 498.205836][ T3648] other info that might help us debug this: [ 498.205839][ T3648] context-{4:4} [ 498.205842][ T3648] 3 locks held by kworker/u5:5/3648: [ 498.205848][ T3648] #0: ffff888020b35938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 498.205875][ T3648] #1: ffffc90003e8fd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 498.205899][ T3648] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 498.205921][ T3648] stack backtrace: [ 498.205924][ T3648] CPU: 0 PID: 3648 Comm: kworker/u5:5 Tainted: G W 6.1.106-syzkaller #0 [ 498.205934][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 498.205940][ T3648] Workqueue: hci3 hci_tx_work [ 498.205952][ T3648] Call Trace: [ 498.205955][ T3648] [ 498.205958][ T3648] dump_stack_lvl+0x1e3/0x2cb [ 498.205971][ T3648] ? nf_tcp_handle_invalid+0x642/0x642 [ 498.205984][ T3648] ? panic+0x764/0x764 [ 498.205992][ T3648] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 498.206007][ T3648] __lock_acquire+0x14b1/0x1f80 [ 498.206023][ T3648] lock_acquire+0x1f8/0x5a0 [ 498.206035][ T3648] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 498.206046][ T3648] ? read_lock_is_recursive+0x10/0x10 [ 498.206058][ T3648] ? __wake_up_klogd+0x1c/0x100 [ 498.206067][ T3648] ? __might_sleep+0xb0/0xb0 [ 498.206076][ T3648] ? vprintk_emit+0x622/0x740 [ 498.206089][ T3648] ? printk_sprint+0x490/0x490 [ 498.206101][ T3648] ? mark_lock+0x9a/0x340 [ 498.206114][ T3648] __mutex_lock+0x132/0xd80 [ 498.206126][ T3648] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 498.206138][ T3648] ? _printk+0xd1/0x111 [ 498.206146][ T3648] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 498.206156][ T3648] ? mutex_lock_nested+0x10/0x10 [ 498.206171][ T3648] ? hci_conn_get_phy+0x370/0x370 [ 498.206181][ T3648] hci_cmd_sync_submit+0x3b/0x2e0 [ 498.206193][ T3648] hci_disconnect+0xe6/0x2c0 [ 498.206203][ T3648] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 498.206212][ T3648] ? __lock_acquire+0x1f80/0x1f80 [ 498.206226][ T3648] __check_timeout+0x333/0x460 [ 498.206234][ T3648] ? __check_timeout+0x181/0x460 [ 498.206244][ T3648] hci_tx_work+0x138b/0x1ec0 [ 498.206259][ T3648] ? hci_cmd_work+0x660/0x660 [ 498.206271][ T3648] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 498.206282][ T3648] ? do_raw_spin_unlock+0x137/0x8a0 [ 498.206292][ T3648] ? process_one_work+0x7a9/0x11d0 [ 498.206302][ T3648] process_one_work+0x8a9/0x11d0 [ 498.206315][ T3648] ? worker_detach_from_pool+0x260/0x260 [ 498.206327][ T3648] ? _raw_spin_lock_irqsave+0x120/0x120 [ 498.206337][ T3648] ? kthread_data+0x4e/0xc0 [ 498.206350][ T3648] ? wq_worker_running+0x97/0x190 [ 498.206363][ T3648] worker_thread+0xa47/0x1200 [ 498.206374][ T3648] ? release_firmware_map_entry+0x186/0x186 [ 498.206390][ T3648] kthread+0x28d/0x320 [ 498.206398][ T3648] ? worker_clr_flags+0x190/0x190 [ 498.206408][ T3648] ? kthread_blkcg+0xd0/0xd0 [ 498.206417][ T3648] ret_from_fork+0x1f/0x30 [ 498.206431][ T3648] [ 498.330845][ T7709] loop2: detected capacity change from 0 to 256 [ 500.420638][ T48] Bluetooth: hci3: command 0x0406 tx timeout