last executing test programs: 1m44.732187626s ago: executing program 5 (id=1138): io_uring_setup(0x4b6e, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x1, 0x6e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x2, 0x0, @loopback}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x40, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1}, 0x1}) splice(0xffffffffffffffff, &(0x7f0000000040)=0x9100000000000000, 0xffffffffffffffff, 0x0, 0x808, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x14) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 1m43.424505321s ago: executing program 5 (id=1144): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r1, r0, 0x0, 0x80001d00c0d0) 17.675321419s ago: executing program 4 (id=1349): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x8c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 16.26797104s ago: executing program 4 (id=1350): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000340)=0x7) 16.025920196s ago: executing program 4 (id=1351): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ptrace(0x10, r0) chdir(&(0x7f0000000140)='./file0\x00') r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000028c0)={r1, 0x0, 0xb7, 0x8f, &(0x7f0000002640)="04f557e88baa5905a1c16fb6f4dd2aadb6656a2fcee2efa24249284ade9e6aff0136f0663b840720003b6fd9afb4d3e2f34b0f4bd44eb3d3de9bfcfd9e0a426120e93ddb8859dad0917eec450e89a7e0b1ea7d87233262418950b2e43c0321ef1e238fe1b915025298ed6521f0b02fddc107a33c72515e3213879c48b7d79a593868810902847ebdeaf5c8449852c1b45f10c78bc8105b8c3e00dddd16e96876f4ec99f567a1456f198ce09bff67464da35d6e09c65758", &(0x7f0000002700)=""/143, 0xe5, 0x0, 0x14, 0xd4, &(0x7f0000001540)="548184725bb993e25edbae95f97e944cf46add33", &(0x7f00000027c0)="1a3e2665650cd33b8793eb6e01b71f8128d21d30198a83213f2815808ed8499ba2c321fbd645c85c49dffff0175c5d25fe6789343e2dd8b604c7e89d9d56936523a1a77b7826539460ff9c9ee34196a4df771c39ac535169af65bf6760c89a31987e97db6a4862b068afea1b6ce5742c1bac42ec757261d2a8d889bbec133a016693747deec46baba26dc1a838dd6cda3701fe720a415b6db8994d2d38a4d65473608a4ea7148d6103be7875e01a721057dd5c024f3f636c4ec6c74fea76135ec8715e29c10fe5aa2d5f5ce273a988a376de88da", 0x2, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f0000001000)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030300000000030303030303030392c756d61736b3d30303030303030303030303030303030303030343030302c6e6c733d6370313235352c747970653dd35c00552c756d61736b3d30303030032a605dce4e509e303030363734352c0000000000fafbefd166dfb1b2484a3d1974a8bbeb4e6f2fbc38e53db5e8a2e9dbdc592c15325e3904b6b1826488d697e94f7e4dad3da5827f2de9c8c052417319de69a5b2bda1d8ed27d882b87d48e28c3d127c666dd271ab"], 0x3, 0x6b2, &(0x7f0000001880)="$eJzs3U+IHFkdB/BvdSY96QjZ2X/ZKEKGDSy6wWQmzZoIwkYRySFI0Mteh2SyGTLJLpNZyS5iOuoqePIke/CwIvGwIoiIsJ4W17MgePGUe8CbhxzUkfrTMz0znUlPkpkedz8fqK73+r1671e/VFV3V2foAJ9a517L/l6KnDt+/mZZv3unu3j3Tvdav5xkMkkrmahXKTpJ8XFyNvWSz5ZPNsMVD5rnlXsfFhPvfdCtaxPNUvVvbbXdJkN79pIDq5V9Sabr4r9HHnbTeNVSjXNxbbxHVKzGXSbsWD9xMG4rm/TWGlsP3Xz08xbYs27Vr5ubTCUHU7+6lu8D0lwdHn5lGIfOutqW16beTscCAAAAO2/oZ/lBT93P/dzMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Zivo3A4tmafXL0yn6v//fHvhN/faYw31M716uVt9+atyBAAAAAAAAAMBjOXo/93Mzh/r1laL6zv/FqvJc9fiZvJUbmc9STuRm5rKc5SxlNsnUwEDtm3PLy0uzm7f8ecotV1ZWbjVbnhq65an1cfU2Bjrsfxps6gQAAAAAAAAAn1o/yLm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvKJJ99apanuuXp9KaSHIgSbuYXu3eHmuwj6UO/aNxhwEAAAC751Dx37qwUlSf+Q9Xn/sP5K1cz3IWspzFzOdSdS+g/ujc+luvu3j3TvdauWwe8Gv/3Nb81Yip7z0Mn3mm6vH86hbn8s18J8cznQtZykK+m7ksZz7T+UZVmkuRqebuxdTdO530Y90c79l1tQsbYzs6UC7jO1JF0snlLFSxncjFdj/0VtPvyMBsf2wnG2a8XWaneLUxYo4uNetyj37WrPeGqWrP969mZKbJfZmNpwfzvjn32zxONs40m9bqPajn1mYpqxtneqScH2zWu5Drbd5KW5+J3k/LWv/oO7x1zpMv/v3PF660rl+9cvnG8b1zGD2ijcdEdyATL4yUicUyE73HyMSBx4n/yWk32aivotu7Wr5YbXsoC/lW3silzOd0ZjKbM5nJV3Iq3ZwayOvzW+e1Otda2zvXjn2hKXSS/KRZ76rJBzWUeX16IK+DV7qpqm3wmbUsPTNClop2hmfpH0NDmfhcUyjn+OHAK874bczE7EAmnt06E7/8z0qSG4vXry5dmXtzxPleatblafvu+mv0r57IDm1fs7vl8fJM+Y9VVn6cdUdH2fZsv21DvtrNNy4TzWDr2tqpzue67WFnajnS4dvDRqrbXhg6S7dqOzLQtu5dTt7I4uq7EAD2rFYOvnyw3bnX+Wvn/c6POlc65w98ffLM5Ofb2f+XiT/t+13r162vFi/n/Xw/h8YdKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBLcePudq3OLi/NLe7CQ1gidf5vRB7w9tKmfivqZ9k7vVz3ZR78Ze3qfaKF/IE1udUT9PskW47THEXwnyc5OcXS0zpnYhV2ezJCm86vPdJLWajxJru6RH7gDdsLJ5Wtvnrzx9jtfWrg29/r86/PXT505/erp7pdnb528vLA4P1M/jjtKYCdsfF8KAAAAAAAAAAAA7H278VcWQ6YtemPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/07nXsr+XIrMzJ2bK+t073cVy6ZfXek4kaSUpvpcUHydnUy+ZGhiueNA8r9z78BcvvfdBd22siX7/1obt/vCvlZVt7kWvWTKdZF+zfrjJkca7ODBeb5uB1YrVPSwTdqyfOBi3/wUAAP//0koEbg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x30, r3, 0x510, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc0, 0x35}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) epoll_create1(0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='.\x02\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xd95082, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', r5, &(0x7f0000000180)='.\x02\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "a8"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) fsync(r2) 12.759136999s ago: executing program 4 (id=1362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000003700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB='uni_xlate=0,shortname=win95,shortname=winnt,iocharset=macromanian,shortname=lower,shortname=lower,utf8=0,utf8=0,nfs=nostale_ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',rodir,shortname=win95,shortname=winnt,iocharset=ascii,uid=', @ANYRESHEX=0x0, @ANYBLOB="c204ec5d4c8e2398215a7777ae6c509f190a9c9eea3500c553a78fc83652b8c4c6c912c2553475cdf39a4df7d5a72cb10b9077c313039800c86ed739dc74b52e6350ca08f987bf38fecf7cfc35508e8fef5b70a7026c3e7a69d3fe593862750672d97b011356d155df27e910facb4c"], 0x1, 0x2a9, &(0x7f0000000480)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 10.396403623s ago: executing program 0 (id=1369): openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r4, 0x4, 0x4400) dup3(r4, r3, 0x0) io_setup(0x100, &(0x7f0000000240)=0x0) io_submit(r7, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}]) 9.004252529s ago: executing program 3 (id=1371): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x8001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="7f", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 7.957460896s ago: executing program 4 (id=1373): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f00000007c0), 0x1, 0x472, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x12}]}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = io_uring_setup(0x168e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) pread64(r6, &(0x7f0000000180)=""/252, 0xfc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.603933934s ago: executing program 2 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 7.532210871s ago: executing program 1 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capget(&(0x7f0000000380)={0x19980330, r0}, &(0x7f00000003c0)={0x380000, 0x8, 0x100, 0x9, 0x8}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(0x0, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 7.410534685s ago: executing program 0 (id=1378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) unlink(0x0) listen(0xffffffffffffffff, 0x0) 6.452659182s ago: executing program 1 (id=1379): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=") chdir(0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00010000", @ANYRES64=r1, @ANYBLOB='\a\x00\x00\x00'], 0x100) 6.43133738s ago: executing program 3 (id=1380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000000024000280080001400000005e08000440000000030800034000000004080002400000000a0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 6.120410601s ago: executing program 1 (id=1381): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000ac0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) 6.120235376s ago: executing program 3 (id=1382): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 5.577560285s ago: executing program 3 (id=1383): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x15ae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) socket$netlink(0x10, 0x3, 0x10) 5.048058217s ago: executing program 1 (id=1384): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040b40461de00200000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f0000000040)) r1 = syz_pidfd_open(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002004000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24004044) bind$inet(r3, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x4788}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x101}]}}}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) recvfrom$inet6(r8, &(0x7f0000001300)=""/29, 0x1d, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) poll(&(0x7f0000000040)=[{r8}], 0x1, 0x800) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a1", 0xc7, 0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002040)=@o_path={&(0x7f0000002000)='./file0\x00', 0x0, 0x4010, r1}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000013c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001c00)={0x10, 0x6, {0x94, @usage=0xcee, 0x0, 0x96, 0xf672, 0x1000, 0x145, 0x900, 0x0, @struct={0x400, 0x6}, 0x7, 0x9, [0x4, 0xffff, 0x80000001, 0x7, 0x40, 0x2]}, {0xf740, @usage=0x1, 0x0, 0x80000000, 0x1000, 0x9, 0x1ff, 0xd347, 0x3, @usage=0x4, 0xff, 0x2, [0xaa, 0x200, 0x2, 0x8, 0x44, 0x9]}, {0xffffffff, @struct={0x10001}, r9, 0xbb4, 0x20, 0x81, 0x3, 0x2, 0xe, @usage=0x4, 0x9, 0x1, [0x8001, 0x200, 0x3, 0x800, 0x80000001, 0x6]}, {0x9, 0x8, 0x200}}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) fcntl$dupfd(r3, 0x406, r0) 5.001941138s ago: executing program 2 (id=1385): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) connect$inet6(r0, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0xfe46) 4.943186096s ago: executing program 0 (id=1386): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0xbb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314142}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="008946254f28c3aa52cab290c3b1b1cd25ee9d65597801770db75dac5f491c60d4afe2e9843714de96f81cfa876f9e8048d2088233f1bf28d4d1493421eb87b2b8ffa384af2f04be9319d123479aac7e18f59870a97464def1ccf71f58cb4a0e89473a8f2c0338d87f4d754873cf5ce0fcf48c05fbbc211c093fcba9d2e90d4cb6ad6ccfa64ea0c3b1091767fbd10ba2159cb4891be3a5518df62c2c8055e6e4fa015c161ab3384de5c45cea881609"], 0x1, 0x5ca, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "84f6e950f996e8b9b1b1ffd65952b094feeeddf5dac2c197ea6174777a656503da9c2b7cecb27819478eb79ce74ce58696167b8760f099c6a6997163d1fa9e2b"}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknod(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4.764759015s ago: executing program 5 (id=1145): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r3, @ANYBLOB="00006b746769643d0092", @ANYRESHEX=0x0, @ANYRESDEC=r2], 0x1, 0x20b, &(0x7f0000000700)="$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") 4.494501817s ago: executing program 2 (id=1387): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x1ff, 0xffff}, 0x8) 3.599347003s ago: executing program 0 (id=1388): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) 3.598530114s ago: executing program 2 (id=1389): openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r4, 0x4, 0x4400) dup3(r4, r3, 0x0) io_setup(0x100, &(0x7f0000000240)=0x0) io_submit(r7, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}]) 3.518434784s ago: executing program 5 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capget(&(0x7f0000000380)={0x19980330, r0}, &(0x7f00000003c0)={0x380000, 0x8, 0x100, 0x9, 0x8}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r3, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 1.870377712s ago: executing program 3 (id=1391): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x8001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="7f", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 971.866553ms ago: executing program 2 (id=1392): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 970.446907ms ago: executing program 5 (id=1393): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") chdir(0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00010000", @ANYRES64=r1, @ANYBLOB='\a\x00\x00\x00'], 0x100) 900.43932ms ago: executing program 0 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 635.670607ms ago: executing program 1 (id=1395): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000ac0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) 617.324991ms ago: executing program 5 (id=1396): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 561.761686ms ago: executing program 0 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) unlink(0x0) listen(0xffffffffffffffff, 0x0) 471.80441ms ago: executing program 3 (id=1398): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3f00}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 255.174553ms ago: executing program 2 (id=1399): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ptrace(0x10, r0) chdir(&(0x7f0000000140)='./file0\x00') r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000028c0)={r1, 0x0, 0xb7, 0x8f, &(0x7f0000002640)="04f557e88baa5905a1c16fb6f4dd2aadb6656a2fcee2efa24249284ade9e6aff0136f0663b840720003b6fd9afb4d3e2f34b0f4bd44eb3d3de9bfcfd9e0a426120e93ddb8859dad0917eec450e89a7e0b1ea7d87233262418950b2e43c0321ef1e238fe1b915025298ed6521f0b02fddc107a33c72515e3213879c48b7d79a593868810902847ebdeaf5c8449852c1b45f10c78bc8105b8c3e00dddd16e96876f4ec99f567a1456f198ce09bff67464da35d6e09c65758", &(0x7f0000002700)=""/143, 0xe5, 0x0, 0x14, 0xd4, &(0x7f0000001540)="548184725bb993e25edbae95f97e944cf46add33", &(0x7f00000027c0)="1a3e2665650cd33b8793eb6e01b71f8128d21d30198a83213f2815808ed8499ba2c321fbd645c85c49dffff0175c5d25fe6789343e2dd8b604c7e89d9d56936523a1a77b7826539460ff9c9ee34196a4df771c39ac535169af65bf6760c89a31987e97db6a4862b068afea1b6ce5742c1bac42ec757261d2a8d889bbec133a016693747deec46baba26dc1a838dd6cda3701fe720a415b6db8994d2d38a4d65473608a4ea7148d6103be7875e01a721057dd5c024f3f636c4ec6c74fea76135ec8715e29c10fe5aa2d5f5ce273a988a376de88da", 0x2, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f0000001000)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030300000000030303030303030392c756d61736b3d30303030303030303030303030303030303030343030302c6e6c733d6370313235352c747970653dd35c00552c756d61736b3d30303030032a605dce4e509e303030363734352c0000000000fafbefd166dfb1b2484a3d1974a8bbeb4e6f2fbc38e53db5e8a2e9dbdc592c15325e3904b6b1826488d697e94f7e4dad3da5827f2de9c8c052417319de69a5b2bda1d8ed27d882b87d48e28c3d127c666dd271ab"], 0x3, 0x6b2, &(0x7f0000001880)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x30, r3, 0x510, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc0, 0x35}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) epoll_create1(0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000c80)='.\x02\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0xc85, &(0x7f0000001980)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xd95082, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', r5, &(0x7f0000000180)='.\x02\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "a8"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) fsync(r2) 254.79468ms ago: executing program 4 (id=1400): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0xbb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314142}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="008946254f28c3aa52cab290c3b1b1cd25ee9d65597801770db75dac5f491c60d4afe2e9843714de96f81cfa876f9e8048d2088233f1bf28d4d1493421eb87b2b8ffa384af2f04be9319d123479aac7e18f59870a97464def1ccf71f58cb4a0e89473a8f2c0338d87f4d754873cf5ce0fcf48c05fbbc211c093fcba9d2e90d4cb6ad6ccfa64ea0c3b1091767fbd10ba2159cb4891be3a5518df62c2c8055e6e4fa015c161ab3384de5c45cea881609"], 0x1, 0x5ca, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "84f6e950f996e8b9b1b1ffd65952b094feeeddf5dac2c197ea6174777a656503da9c2b7cecb27819478eb79ce74ce58696167b8760f099c6a6997163d1fa9e2b"}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknod(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 1 (id=1401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x1ff, 0xffff}, 0x8) kernel console output (not intermixed with test programs): d: readahead error at folio 196 @ nid 36 [ 501.144941][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.568246][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 192 @ nid 36 [ 501.813731][ T9802] loop4: detected capacity change from 0 to 256 [ 501.832984][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 180 @ nid 36 [ 501.903795][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 501.916864][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 172 @ nid 36 [ 501.967911][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 168 @ nid 36 [ 502.033173][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 160 @ nid 36 [ 502.069237][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 149 @ nid 36 [ 502.122307][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 148 @ nid 36 [ 502.212413][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 144 @ nid 36 [ 502.312545][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 502.312567][ T29] audit: type=1800 audit(1726028676.094:61): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1090" name="file0" dev="loop4" ino=1048656 res=0 errno=0 [ 502.402598][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 140 @ nid 36 [ 502.499302][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 92 @ nid 36 [ 502.554894][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 77 @ nid 36 [ 502.743653][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 502.904662][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 69 @ nid 36 [ 503.065269][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 68 @ nid 36 [ 503.138506][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 503.208225][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 60 @ nid 36 [ 503.294667][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 503.390332][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 503.468289][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 503.502534][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 503.592774][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 503.642131][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 503.722263][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 17 @ nid 36 [ 503.760359][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 503.776572][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 503.786297][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 503.796453][ T9765] syz.0.1087: attempt to access beyond end of device [ 503.796453][ T9765] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 503.858164][ T9765] syz.0.1087: attempt to access beyond end of device [ 503.858164][ T9765] loop0: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 503.895819][ T9765] syz.0.1087: attempt to access beyond end of device [ 503.895819][ T9765] loop0: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 503.930873][ T9765] syz.0.1087: attempt to access beyond end of device [ 503.930873][ T9765] loop0: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 503.955747][ T5249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 503.973777][ T5249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 503.981660][ T5249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 503.993990][ T5249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 504.001973][ T5249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 504.012995][ T5249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 504.042447][ T9765] syz.0.1087: attempt to access beyond end of device [ 504.042447][ T9765] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 505.899526][ T9765] syz.0.1087: attempt to access beyond end of device [ 505.899526][ T9765] loop0: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 505.942054][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.022479][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.022479][ T9765] loop0: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 506.066350][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.066350][ T9765] loop0: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 506.107930][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.107930][ T9765] loop0: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 506.183424][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.183424][ T9765] loop0: rw=524288, sector=13478624040, nr_sectors = 16 limit=16 [ 506.256043][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.256043][ T9765] loop0: rw=524288, sector=14550774152, nr_sectors = 16 limit=16 [ 506.350548][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.350548][ T9765] loop0: rw=524288, sector=14550774160, nr_sectors = 16 limit=16 [ 506.425346][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.425346][ T9765] loop0: rw=524288, sector=13716630376, nr_sectors = 16 limit=16 [ 506.480175][ T54] Bluetooth: hci6: command tx timeout [ 506.527821][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.527821][ T9765] loop0: rw=524288, sector=13716630384, nr_sectors = 16 limit=16 [ 506.635715][ T9765] syz.0.1087: attempt to access beyond end of device [ 506.635715][ T9765] loop0: rw=524288, sector=72, nr_sectors = 16 limit=16 [ 507.421359][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 509.033583][ T54] Bluetooth: hci6: command tx timeout [ 510.034207][ T9896] loop4: detected capacity change from 0 to 128 [ 510.051395][ T9896] msdos: Unknown parameter '0x000000000000000018446744073709551615ÀÓE ÿÿÿÿÿÿÿÿ' [ 510.097527][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1112'. [ 511.184549][ T54] Bluetooth: hci6: command tx timeout [ 511.463736][ T9920] loop3: detected capacity change from 0 to 8 [ 511.600866][ T9920] SQUASHFS error: zlib decompression failed, data probably corrupt [ 511.609455][ T9920] SQUASHFS error: Failed to read block 0x9b: -5 [ 511.615803][ T9920] SQUASHFS error: Unable to read metadata cache entry [99] [ 511.624669][ T9920] SQUASHFS error: Unable to read inode 0x127 [ 511.716410][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.746387][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.767995][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.791697][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.816799][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 511.870714][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.556653][ T9928] hub 6-0:1.0: USB hub found [ 512.566673][ T9928] hub 6-0:1.0: 1 port detected [ 513.060289][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.439769][ T5249] Bluetooth: hci6: command tx timeout [ 513.594786][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.749210][ T9829] bridge_slave_0: entered allmulticast mode [ 513.878156][ T9829] bridge_slave_0: entered promiscuous mode [ 513.943699][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.982718][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.010008][ T9829] bridge_slave_1: entered allmulticast mode [ 514.042434][ T9829] bridge_slave_1: entered promiscuous mode [ 514.083189][ T5249] Bluetooth: hci3: command tx timeout [ 514.608403][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.641528][ T9947] syz.1.1125[9947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.641710][ T9947] syz.1.1125[9947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.667980][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.717479][ T9947] loop1: detected capacity change from 0 to 512 [ 514.737463][ T9947] EXT4-fs: Ignoring removed bh option [ 514.884961][ T9947] EXT4-fs error (device loop1): __ext4_iget:4985: inode #12: block 2: comm syz.1.1125: invalid block [ 514.951476][ T9947] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1125: couldn't read orphan inode 12 (err -117) [ 514.998782][ T9947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.270944][ T9947] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1125: Directory hole found for htree leaf block 0 [ 515.724458][ T9965] loop3: detected capacity change from 0 to 24 [ 515.864859][ T9965] fuse: Unknown parameter 'fd0x0000000000000004' [ 515.917745][ T9829] team0: Port device team_slave_0 added [ 516.048008][ T9829] team0: Port device team_slave_1 added [ 516.063249][ T9971] syz.4.1131[9971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.063429][ T9971] syz.4.1131[9971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.152719][ T5249] Bluetooth: hci3: command tx timeout [ 516.439136][ T9979] loop5: detected capacity change from 0 to 256 [ 517.277283][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.329082][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.482124][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.511968][ T6124] bridge_slave_1: left allmulticast mode [ 517.533247][ T6124] bridge_slave_1: left promiscuous mode [ 517.553584][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.086214][ T6124] bridge_slave_0: left allmulticast mode [ 518.234751][ T6124] bridge_slave_0: left promiscuous mode [ 518.249401][ T5249] Bluetooth: hci3: command tx timeout [ 518.393095][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.849771][ T9999] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 518.851832][ T9998] loop5: detected capacity change from 0 to 512 [ 518.884139][ T9998] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.963288][ T9998] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 519.080570][ T9998] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1137: attempt to clear invalid blocks 2 len 1 [ 519.164119][ T9998] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 519.213432][ T9998] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1137: invalid indirect mapped block 1819239214 (level 0) [ 519.248137][ T9998] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1137: invalid indirect mapped block 1819239214 (level 1) [ 519.287961][ T9998] EXT4-fs (loop5): 1 truncate cleaned up [ 519.298870][ T9998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.322223][ T5249] Bluetooth: hci3: command tx timeout [ 520.412447][ T9995] loop4: detected capacity change from 0 to 32768 [ 520.500632][ T8448] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 520.576861][ T9995] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 520.676871][ T8448] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 520.713842][ T8448] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 520.745743][ T9995] XFS (loop4): Ending clean mount [ 520.812667][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.834649][ T8440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.872737][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.908908][ T6124] bond0 (unregistering): Released all slaves [ 521.000444][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.029304][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.113447][ T8] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 521.114310][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.152384][ T8] XFS (loop4): Unmount and run xfs_repair [ 521.187584][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 521.217239][ T8] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 521.242165][ T8] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 521.275176][ T8] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 521.313334][ T8] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 521.346969][ T8] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 521.368984][ T8] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 521.384428][ T6124] hsr_slave_0: left promiscuous mode [ 521.396757][ T6124] hsr_slave_1: left promiscuous mode [ 521.409538][ T8] 00000060: 00 40 00 00 00 00 00 00 00 00 00 03 00 00 00 02 .@.............. [ 521.425041][ T8] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 521.438097][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.454576][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.472502][ T9995] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 521.492679][T10018] loop3: detected capacity change from 0 to 256 [ 521.528802][ T8448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.668208][ T9995] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 521.738103][ T9995] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 521.883034][ T29] audit: type=1800 audit(1726028695.674:62): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1141" name="file0" dev="loop3" ino=1048657 res=0 errno=0 [ 521.958974][ T8444] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 522.604142][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 525.862629][T10035] tty tty28: ldisc open failed (-12), clearing slot 27 [ 526.195130][T10044] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 526.429187][ T6124] team0 (unregistering): Port device team_slave_0 removed [ 527.793143][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.804852][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 527.813376][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 527.822531][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.025317][ T29] audit: type=1326 audit(1726028702.804:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.4.1159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b35d7def9 code=0x0 [ 529.284834][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 529.292834][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.663718][T10085] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 530.683620][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 530.949111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.960935][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.971019][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 530.980989][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.271596][ T9] usb 5-1: config 0 descriptor?? [ 531.432592][ T54] Bluetooth: hci1: command tx timeout [ 531.720951][T10083] loop4: detected capacity change from 0 to 512 [ 531.767112][ T9829] hsr_slave_0: entered promiscuous mode [ 531.857650][ T9829] hsr_slave_1: entered promiscuous mode [ 531.876927][T10083] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.1161: corrupted in-inode xattr: invalid ea_ino [ 531.942323][T10098] loop3: detected capacity change from 0 to 256 [ 531.993439][T10083] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1161: couldn't read orphan inode 12 (err -117) [ 532.151635][T10083] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.685110][T10083] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1161: Directory hole found for htree leaf block 0 [ 533.251171][T10083] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1161: Directory hole found for htree leaf block 0 [ 533.512167][ T54] Bluetooth: hci1: command tx timeout [ 533.660187][ T9916] chnl_net:caif_netlink_parms(): no params data found [ 534.428841][T10125] loop3: detected capacity change from 0 to 16 [ 534.454781][T10125] erofs: (device loop3): mounted with root inode @ nid 36. [ 534.483835][T10125] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 534.495520][T10125] erofs: (device loop3): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 534.506326][T10125] erofs: (device loop3): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 534.517246][T10125] erofs: (device loop3): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 534.529722][T10125] bio_check_eod: 20 callbacks suppressed [ 534.529780][T10125] syz.3.1170: attempt to access beyond end of device [ 534.529780][T10125] loop3: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 534.549959][T10125] syz.3.1170: attempt to access beyond end of device [ 534.549959][T10125] loop3: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 534.585224][ T29] audit: type=1326 audit(1726028708.374:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.3.1170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x0 [ 535.263103][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 535.270997][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 535.303395][ T9] usb 5-1: USB disconnect, device number 2 [ 535.515048][T10132] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 535.592440][ T54] Bluetooth: hci1: command tx timeout [ 535.606487][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.639450][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.662808][ T8444] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 535.682937][ T9916] bridge_slave_0: entered allmulticast mode [ 535.714991][ T9916] bridge_slave_0: entered promiscuous mode [ 535.754506][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.789858][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.824285][ T9916] bridge_slave_1: entered allmulticast mode [ 535.850079][ T9916] bridge_slave_1: entered promiscuous mode [ 535.981112][T10120] loop1: detected capacity change from 0 to 40427 [ 535.989299][T10120] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 535.999665][T10120] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 536.046597][T10120] F2FS-fs (loop1): Found nat_bits in checkpoint [ 536.110655][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.156642][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.217268][T10120] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 536.232317][T10120] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 536.390456][T10120] syz.1.1171: attempt to access beyond end of device [ 536.390456][T10120] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 536.833643][ T9916] team0: Port device team_slave_0 added [ 537.693532][ T54] Bluetooth: hci1: command tx timeout [ 537.837227][ T6124] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.971839][ T9916] team0: Port device team_slave_1 added [ 538.222842][ T6124] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.342043][ T6124] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.402262][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 538.599027][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.629521][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.651739][ T46] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 538.665937][ T46] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 538.682749][ T46] usb 4-1: Product: syz [ 538.689704][ T46] usb 4-1: config 0 descriptor?? [ 538.706997][ T6124] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.770433][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.796775][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.889803][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.934496][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.941474][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.994020][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.138689][ T46] konepure 0003:1E7D:2DB4.0002: item fetching failed at offset 10/11 [ 539.177944][ T46] konepure 0003:1E7D:2DB4.0002: parse failed [ 539.209520][ T46] konepure 0003:1E7D:2DB4.0002: probe with driver konepure failed with error -22 [ 539.265913][ T9916] hsr_slave_0: entered promiscuous mode [ 539.304239][ T9916] hsr_slave_1: entered promiscuous mode [ 539.324708][ T9916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.332805][ T9916] Cannot create hsr debugfs directory [ 539.370927][T10068] chnl_net:caif_netlink_parms(): no params data found [ 539.391235][ T9] usb 4-1: USB disconnect, device number 3 [ 539.452172][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 539.675770][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.699378][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.729135][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 539.812163][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.860632][T10193] loop4: detected capacity change from 0 to 2048 [ 539.863642][ T8] usb 2-1: config 0 descriptor?? [ 539.956217][T10193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.083693][ T9829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 540.092613][ T8444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.108340][T10179] loop1: detected capacity change from 0 to 512 [ 540.147178][ T9829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.179710][T10179] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.1182: corrupted in-inode xattr: invalid ea_ino [ 540.190138][ T6124] bridge_slave_1: left allmulticast mode [ 540.200566][T10179] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1182: couldn't read orphan inode 12 (err -117) [ 540.222595][ T6124] bridge_slave_1: left promiscuous mode [ 540.228375][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.263420][T10179] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.320854][T10179] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1182: Directory hole found for htree leaf block 0 [ 540.413638][ T6124] bridge_slave_0: left allmulticast mode [ 540.440750][ T6124] bridge_slave_0: left promiscuous mode [ 540.450462][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.713553][T10205] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1182: Directory hole found for htree leaf block 0 [ 541.838986][T10203] fuse: Unknown parameter '0x0000000000000007' [ 542.683092][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.713336][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.740867][ T6124] bond0 (unregistering): Released all slaves [ 542.847879][ T9829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 542.891151][T10200] tipc: Started in network mode [ 542.901663][T10200] tipc: Node identity 1, cluster identity 4711 [ 542.914584][T10200] tipc: Node number set to 1 [ 542.916676][T10209] loop4: detected capacity change from 0 to 40427 [ 542.982024][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 542.986482][T10209] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 542.988134][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 543.012251][T10209] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 543.129389][ T8] usb 2-1: USB disconnect, device number 11 [ 543.135710][ T9829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.149083][T10209] F2FS-fs (loop4): Found nat_bits in checkpoint [ 543.158681][ T8440] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 543.307229][T10209] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 543.334271][T10209] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 543.403634][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.410830][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.416845][T10209] syz.4.1187: attempt to access beyond end of device [ 543.416845][T10209] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 543.449811][T10068] bridge_slave_0: entered allmulticast mode [ 543.493972][T10068] bridge_slave_0: entered promiscuous mode [ 543.523992][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.531176][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.555241][T10068] bridge_slave_1: entered allmulticast mode [ 543.562959][T10068] bridge_slave_1: entered promiscuous mode [ 543.959959][T10228] netlink: 'syz.1.1194': attribute type 23 has an invalid length. [ 543.995973][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 544.022403][T10230] loop3: detected capacity change from 0 to 2048 [ 544.044697][T10228] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.055243][T10228] bridge0: entered promiscuous mode [ 544.090434][T10230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.156019][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.228242][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.314405][ T8310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.367074][ T6124] hsr_slave_0: left promiscuous mode [ 544.550760][ T6124] hsr_slave_1: left promiscuous mode [ 544.565157][T10241] loop3: detected capacity change from 0 to 128 [ 544.576802][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.615938][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.655829][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.690756][ T29] audit: type=1800 audit(1726028718.474:65): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1197" name="bus" dev="loop3" ino=1048658 res=0 errno=0 [ 544.715224][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.405932][ T6124] veth1_macvtap: left promiscuous mode [ 545.411533][ T6124] veth0_macvtap: left promiscuous mode [ 545.568424][ T2530] kworker/u8:9: attempt to access beyond end of device [ 545.568424][ T2530] loop3: rw=1, sector=145, nr_sectors = 25 limit=128 [ 546.050880][T10261] loop1: detected capacity change from 0 to 512 [ 546.184984][T10262] hub 6-0:1.0: USB hub found [ 546.191856][T10262] hub 6-0:1.0: 1 port detected [ 546.674881][T10261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.742302][T10261] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.305019][T10270] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 547.316173][T10270] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 547.325707][T10270] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1200: Failed to acquire dquot type 0 [ 547.985801][ T8440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.389008][T10275] loop1: detected capacity change from 0 to 256 [ 548.462671][T10275] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 548.473339][T10275] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 548.483706][T10275] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 548.763946][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 549.159364][ T6124] team0 (unregistering): Port device team_slave_0 removed [ 549.325484][T10268] loop3: detected capacity change from 0 to 40427 [ 549.356255][T10268] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 549.360059][T10278] loop1: detected capacity change from 0 to 8 [ 549.370692][T10268] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 549.440417][T10268] F2FS-fs (loop3): Found nat_bits in checkpoint [ 549.615631][T10268] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 549.622861][T10268] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 549.629824][T10278] SQUASHFS error: lzo decompression failed, data probably corrupt [ 549.665459][T10278] SQUASHFS error: Failed to read block 0x0: -5 [ 549.688042][T10268] syz.3.1201: attempt to access beyond end of device [ 549.688042][T10268] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 549.733845][T10278] SQUASHFS error: lzo decompression failed, data probably corrupt [ 549.741916][T10278] SQUASHFS error: Failed to read block 0x0: -5 [ 549.780989][ T29] audit: type=1800 audit(1726028723.554:66): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1203" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 550.176919][T10278] syz.1.1203 (10278) used greatest stack depth: 16656 bytes left [ 550.709345][ T9916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.845896][T10068] team0: Port device team_slave_0 added [ 551.132548][ T9916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.270222][T10068] team0: Port device team_slave_1 added [ 551.455677][ T9916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.454692][ T9916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.581932][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.590911][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.639800][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.706400][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.752240][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.844266][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.250115][T10068] hsr_slave_0: entered promiscuous mode [ 553.294214][T10068] hsr_slave_1: entered promiscuous mode [ 553.330322][T10068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.357897][T10068] Cannot create hsr debugfs directory [ 553.778022][T10319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.839482][ T9916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.979634][ T9916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.018468][ T9916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.087262][ T9916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.126347][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.140969][ T29] audit: type=1326 audit(1726028727.924:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.231706][ T29] audit: type=1326 audit(1726028727.954:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.360076][ T29] audit: type=1326 audit(1726028727.954:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.461685][ T29] audit: type=1326 audit(1726028727.954:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.477086][T10338] loop4: detected capacity change from 0 to 256 [ 554.514653][T10337] loop1: detected capacity change from 0 to 2048 [ 554.531721][ T29] audit: type=1326 audit(1726028727.954:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.570236][T10337] loop1: p1 < > p4 [ 554.588923][T10338] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 554.604074][ T9829] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.617504][ T29] audit: type=1326 audit(1726028727.964:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.619158][T10337] loop1: p4 size 8388608 extends beyond EOD, truncated [ 554.683329][ T29] audit: type=1326 audit(1726028727.964:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.732998][ T29] audit: type=1326 audit(1726028727.964:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 554.764928][ T4681] loop1: p1 < > p4 [ 554.778809][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.782876][ T4681] loop1: p4 size 8388608 extends beyond EOD, [ 554.786006][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.791487][ T4681] truncated [ 554.917522][ T29] audit: type=1326 audit(1726028727.964:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 555.023042][ T29] audit: type=1326 audit(1726028727.974:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 555.075252][ T29] audit: type=1326 audit(1726028727.974:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe56b7def9 code=0x7ffc0000 [ 555.120649][T10055] udevd[10055]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 555.144151][T10043] udevd[10043]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 555.292157][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.299370][ T5626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.864579][T10364] bridge0: port 3(ip6gretap0) entered blocking state [ 555.871681][T10364] bridge0: port 3(ip6gretap0) entered disabled state [ 555.897276][T10364] ip6gretap0: entered allmulticast mode [ 555.906080][T10364] ip6gretap0: entered promiscuous mode [ 555.918820][T10364] bridge0: port 3(ip6gretap0) entered blocking state [ 555.927307][T10364] bridge0: port 3(ip6gretap0) entered forwarding state [ 555.981692][T10366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.155250][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.445402][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.515223][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.522478][ T5633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.774965][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.782259][ T5633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.809266][ T9916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.950970][T10393] hub 6-0:1.0: USB hub found [ 557.957678][T10393] hub 6-0:1.0: 1 port detected [ 558.394171][T10068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 558.519312][T10068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 558.589230][T10068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 558.687644][T10068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 558.768184][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.991579][T10413] loop4: detected capacity change from 0 to 128 [ 559.091532][T10413] vfat: Unknown parameter '18446744073709551615' [ 559.151341][T10416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.286653][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.307572][ T9829] veth0_vlan: entered promiscuous mode [ 559.626951][ T9829] veth1_vlan: entered promiscuous mode [ 559.702429][ T29] audit: type=1326 audit(1726028733.484:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 559.807728][ T29] audit: type=1326 audit(1726028733.484:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 559.820787][ T9829] veth0_macvtap: entered promiscuous mode [ 559.923162][ T29] audit: type=1326 audit(1726028733.484:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 559.947703][T10068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.068470][ T9916] veth0_vlan: entered promiscuous mode [ 564.263249][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.390084][ T9829] veth1_macvtap: entered promiscuous mode [ 564.491543][T10068] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.572117][ T29] audit: type=1326 audit(1726028738.344:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 564.679584][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.686838][ T5626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.722606][ T29] audit: type=1326 audit(1726028738.344:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 564.806893][ T9916] veth1_vlan: entered promiscuous mode [ 564.834546][ T29] audit: type=1326 audit(1726028738.394:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 564.935330][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.942730][ T5626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.958614][ T29] audit: type=1326 audit(1726028738.394:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.049791][ T29] audit: type=1326 audit(1726028738.394:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.204016][ T29] audit: type=1326 audit(1726028738.414:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.324059][ T9916] veth0_macvtap: entered promiscuous mode [ 565.336418][ T29] audit: type=1326 audit(1726028738.414:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.404173][ T9916] veth1_macvtap: entered promiscuous mode [ 565.445117][ T29] audit: type=1326 audit(1726028738.434:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.523990][T10462] loop3: detected capacity change from 0 to 512 [ 565.584104][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.604099][ T29] audit: type=1326 audit(1726028738.434:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.612635][T10462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 565.631164][ T29] audit: type=1326 audit(1726028738.434:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.658298][ T29] audit: type=1326 audit(1726028738.434:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.687422][ T29] audit: type=1326 audit(1726028738.444:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.710169][ T29] audit: type=1326 audit(1726028738.444:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b17def9 code=0x7ffc0000 [ 565.713291][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.742444][T10462] System zones: 1-12 [ 565.754601][T10462] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1249: invalid indirect mapped block 8 (level 2) [ 565.859272][T10462] EXT4-fs (loop3): Remounting filesystem read-only [ 565.866886][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.874259][T10462] EXT4-fs (loop3): 1 truncate cleaned up [ 565.886156][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.899413][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.910309][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.926790][ T5249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 565.935593][T10462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.938112][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.958868][ T5249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 565.968821][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.978886][ T5249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 566.012226][ T5249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 566.022448][ T5249] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 566.030055][ T5249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 566.074706][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.351444][ T8310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.381558][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.452097][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.490511][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.539899][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.569209][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.773112][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.832895][ T9916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.896879][ T9916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.986167][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.007270][T10452] loop1: detected capacity change from 0 to 40427 [ 567.083805][T10452] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 567.157830][ T9916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.185396][T10452] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 567.218460][ T9916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.245841][ T9916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.278802][ T9916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.504494][T10452] F2FS-fs (loop1): Found nat_bits in checkpoint [ 568.155944][ T54] Bluetooth: hci7: command tx timeout [ 569.164563][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.233577][ T54] Bluetooth: hci7: command tx timeout [ 570.526290][T10541] ptrace attach of "./syz-executor exec"[8444] was attempted by "0WÃNø£¤É|\x1bZm±\x07¢`³´ùΞGµ8h=‰$G`TƵ>ÕÁùƒ°˜-œÛ(̤‡in$‚¶ØêHnJ™9»^çÜ×ðÄñ K)ÔÐîi\x22óŠc^ŒÂø\x22™AÓ’W8ýÒÀ*·(›žžáî ´+|¿¡B ëxÀ\x0a@èU\x0cVåçôç7ßÖùÙõ\x1b«×Ú›’TiâºnçÇ›dò m‰õ\x1b\x1b1·ËFÇÇ#L±ü*3j½’¹ÒôŽB1õ.=n\x1bO\x0a\x07•µEA7L{R®œºŒ}ï˜Ü ‡’·gÒÕ§þ¶W„5Jº³±ãŸë‘¥Sî¯z¥Œbö4¨¼lß@Þ¤}¯×[,URÇ@ÞŠû•a\x0b«ö‰†{N›ƒB°Ž9{¨±*¯ö¹¢ª/™ý{ƒ+&àC½CŇÕÊiwaY½&“QF+18<`eÓ_ëO›Sˆ9Š—åB«”ø~‹Ž£®õŒˆ;ÌTÛèð/Zd6^\x09*:#ŸYUD,ÖlÊD S‰4BÐH[YÅöbéâÕƒ‹ˆŽÊÚÆÞ‚÷Ê#¥Œ\x0dO –Ô~ïêK\x07à²QÆD½Ð ÈÛ6$ak~hsHaà\x07ŽŠ·Y_%È`¦e\x22±CÜôÂÚ–ܼÔ*¡¡­vŽD«¬qÂdRÐ}7©¦¾9]ð x0…p––üø{]«%÷ôÒ¤.Ò müŽ=5·×·¥¢_ElR8\x5cæÁ1²càõ‘©ç®ý\x0aŒÓ¹¬¥¼v£&Àe3Q\x0cVU›©†€¥+ôÞù¿klÂ)•q)ì^Næ›Âw!m·)!W\x07ó@Tå—INYÍ3„ä-¶öªÄðxUx#IEõ£\x0c®ê»Ì¹4~cøzôÍ­oxD@\x0c-·¥óÿ²oø>wò\x0a¦ôuŒN/šc›É0 ÷\x0cZ)¡æ¯¦H\x22U÷ÎÒP¯/|Qð§2(rû‡à×f‚~jà6^âëGvßįe\x0a¯TŽœ‡<¶êÚöÉn¶¬Wf\x0a„/Häv\x0cGþµ…¿YsR2Ú]‰€%¸Cj*,°rʺ‹5ìR:g)t\x22}¿^GÝ\x070±Ó~8îNR\x0aT>ÒêAÑ8IÃj˲Ë9¨žÄU\x1bžWîö`ÛÁ(±\x0a`„â(ü¨Š [ 570.580878][T10542] tipc: Started in network mode [ 570.692123][T10542] tipc: Node identity 1, cluster identity 4711 [ 570.729069][T10542] tipc: Node number set to 1 [ 571.010923][T10550] loop3: detected capacity change from 0 to 512 [ 571.052979][T10471] chnl_net:caif_netlink_parms(): no params data found [ 571.258721][T10550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.406426][T10550] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.495606][ T5249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 571.510412][ T5249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 571.520447][ T5249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 571.547653][ T5249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 571.599366][T10562] syz.4.1266[10562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.599556][T10562] syz.4.1266[10562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.656175][ T5249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 571.675676][ T5249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 571.776632][ T5599] bridge_slave_1: left allmulticast mode [ 571.818358][ T5599] bridge_slave_1: left promiscuous mode [ 571.832927][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.947315][T10571] __quota_error: 4 callbacks suppressed [ 571.947370][T10571] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 571.963780][T10571] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 571.973398][T10571] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1264: Failed to acquire dquot type 0 [ 572.203266][ T5599] bridge_slave_0: left allmulticast mode [ 572.252164][ T5599] bridge_slave_0: left promiscuous mode [ 572.258164][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.313225][ T5249] Bluetooth: hci7: command tx timeout [ 572.607742][ T8310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.546788][ T5599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.571299][ T5599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.590192][ T5599] bond0 (unregistering): Released all slaves [ 573.832256][ T5249] Bluetooth: hci6: command tx timeout [ 574.430026][ T5249] Bluetooth: hci7: command tx timeout [ 574.880543][ T5599] hsr_slave_0: left promiscuous mode [ 574.894282][ T5599] hsr_slave_1: left promiscuous mode [ 574.913295][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.951084][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.053895][ T5599] veth1_macvtap: left promiscuous mode [ 575.077941][ T5599] veth0_macvtap: left promiscuous mode [ 575.124979][ T5599] veth1_vlan: left promiscuous mode [ 575.144254][ T5599] veth0_vlan: left promiscuous mode [ 575.307163][T10603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1274'. [ 575.781634][ T5599] team0 (unregistering): Port device team_slave_1 removed [ 575.869568][ T5599] team0 (unregistering): Port device team_slave_0 removed [ 575.926929][ T5249] Bluetooth: hci6: command tx timeout [ 576.436956][T10608] ptrace attach of "./syz-executor exec"[8444] was attempted by "0WÃNø£¤É|\x1bZm±\x07¢`³´ùΞGµ8h=‰$G`TƵ>ÕÁùƒ°˜-œÛ(̤‡in$‚¶ØêHnJ™9»^çÜ×ðÄñ K)ÔÐîi\x22óŠc^ŒÂø\x22™AÓ’W8ýÒÀ*·(›žžáî ´+|¿¡B ëxÀ\x0a@èU\x0cVåçôç7ßÖùÙõ\x1b«×Ú›’TiâºnçÇ›dò m‰õ\x1b\x1b1·ËFÇÇ#L±ü*3j½’¹ÒôŽB1õ.=n\x1bO\x0a\x07•µEA7L{R®œºŒ}ï˜Ü ‡’·gÒÕ§þ¶W„5Jº³±ãŸë‘¥Sî¯z¥Œbö4¨¼lß@Þ¤}¯×[,URÇ@ÞŠû•a\x0b«ö‰†{N›ƒB°Ž9{¨±*¯ö¹¢ª/™ý{ƒ+&àC½CŇÕÊiwaY½&“QF+18<`eÓ_ëO›Sˆ9Š—åB«”ø~‹Ž£®õŒˆ;ÌTÛèð/Zd6^\x09*:#ŸYUD,ÖlÊD S‰4BÐH[YÅöbéâÕƒ‹ˆŽÊÚÆÞ‚÷Ê#¥Œ\x0dO –Ô~ïêK\x07à²QÆD½Ð ÈÛ6$ak~hsHaà\x07ŽŠ·Y_%È`¦e\x22±CÜôÂÚ–ܼÔ*¡¡­vŽD«¬qÂdRÐ}7©¦¾9]ð x0…p––üø{]«%÷ôÒ¤.Ò müŽ=5·×·¥¢_ElR8\x5cæÁ1²càõ‘©ç®ý\x0aŒÓ¹¬¥¼v£&Àe3Q\x0cVU›©†€¥+ôÞù¿klÂ)•q)ì^Næ›Âw!m·)!W\x07ó@Tå—INYÍ3„ä-¶öªÄðxUx#IEõ£\x0c®ê»Ì¹4~cøzôÍ­oxD@\x0c-·¥óÿ²oø>wò\x0a¦ôuŒN/šc›É0 ÷\x0cZ)¡æ¯¦H\x22U÷ÎÒP¯/|Qð§2(rû‡à×f‚~jà6^âëGvßįe\x0a¯TŽœ‡<¶êÚöÉn¶¬Wf\x0a„/Häv\x0cGþµ…¿YsR2Ú]‰€%¸Cj*,°rʺ‹5ìR:g)t\x22}¿^GÝ\x070±Ó~8îNR\x0aT>ÒêAÑ8IÃj˲Ë9¨žÄU\x1bžWîö`ÛÁ(±\x0a`„â(ü¨Š [ 576.615093][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.719882][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.728371][T10471] bridge_slave_0: entered allmulticast mode [ 576.742262][T10471] bridge_slave_0: entered promiscuous mode [ 576.757443][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.769968][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.781542][T10471] bridge_slave_1: entered allmulticast mode [ 577.098142][T10471] bridge_slave_1: entered promiscuous mode [ 577.992266][ T5249] Bluetooth: hci6: command tx timeout [ 578.033769][T10471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.113737][T10471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.442758][T10068] veth0_vlan: entered promiscuous mode [ 578.485758][T10471] team0: Port device team_slave_0 added [ 578.544771][T10471] team0: Port device team_slave_1 added [ 578.869151][T10068] veth1_vlan: entered promiscuous mode [ 578.946939][T10642] syz_tun: entered promiscuous mode [ 578.962716][T10642] vlan2: entered promiscuous mode [ 578.973367][T10642] vlan2: entered allmulticast mode [ 578.989702][T10642] syz_tun: entered allmulticast mode [ 579.002786][T10642] syz_tun: left allmulticast mode [ 579.011333][T10642] syz_tun: left promiscuous mode [ 579.073412][T10471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.087296][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.126972][T10471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.168790][T10471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.201283][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.302309][T10471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.576773][ T5599] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.949583][T10471] hsr_slave_0: entered promiscuous mode [ 579.956726][T10660] ptrace attach of "./syz-executor exec"[8444] was attempted by "0WÃNø£¤É|\x1bZm±\x07¢`³´ùΞGµ8h=‰$G`TƵ>ÕÁùƒ°˜-œÛ(̤‡in$‚¶ØêHnJ™9»^çÜ×ðÄñ K)ÔÐîi\x22óŠc^ŒÂø\x22™AÓ’W8ýÒÀ*·(›žžáî ´+|¿¡B ëxÀ\x0a@èU\x0cVåçôç7ßÖùÙõ\x1b«×Ú›’TiâºnçÇ›dò m‰õ\x1b\x1b1·ËFÇÇ#L±ü*3j½’¹ÒôŽB1õ.=n\x1bO\x0a\x07•µEA7L{R®œºŒ}ï˜Ü ‡’·gÒÕ§þ¶W„5Jº³±ãŸë‘¥Sî¯z¥Œbö4¨¼lß@Þ¤}¯×[,URÇ@ÞŠû•a\x0b«ö‰†{N›ƒB°Ž9{¨±*¯ö¹¢ª/™ý{ƒ+&àC½CŇÕÊiwaY½&“QF+18<`eÓ_ëO›Sˆ9Š—åB«”ø~‹Ž£®õŒˆ;ÌTÛèð/Zd6^\x09*:#ŸYUD,ÖlÊD S‰4BÐH[YÅöbéâÕƒ‹ˆŽÊÚÆÞ‚÷Ê#¥Œ\x0dO –Ô~ïêK\x07à²QÆD½Ð ÈÛ6$ak~hsHaà\x07ŽŠ·Y_%È`¦e\x22±CÜôÂÚ–ܼÔ*¡¡­vŽD«¬qÂdRÐ}7©¦¾9]ð x0…p––üø{]«%÷ôÒ¤.Ò müŽ=5·×·¥¢_ElR8\x5cæÁ1²càõ‘©ç®ý\x0aŒÓ¹¬¥¼v£&Àe3Q\x0cVU›©†€¥+ôÞù¿klÂ)•q)ì^Næ›Âw!m·)!W\x07ó@Tå—INYÍ3„ä-¶öªÄðxUx#IEõ£\x0c®ê»Ì¹4~cøzôÍ­oxD@\x0c-·¥óÿ²oø>wò\x0a¦ôuŒN/šc›É0 ÷\x0cZ)¡æ¯¦H\x22U÷ÎÒP¯/|Qð§2(rû‡à×f‚~jà6^âëGvßįe\x0a¯TŽœ‡<¶êÚöÉn¶¬Wf\x0a„/Häv\x0cGþµ…¿YsR2Ú]‰€%¸Cj*,°rʺ‹5ìR:g)t\x22}¿^GÝ\x070±Ó~8îNR\x0aT>ÒêAÑ8IÃj˲Ë9¨žÄU\x1bžWîö`ÛÁ(±\x0a`„â(ü¨Š [ 579.978222][T10471] hsr_slave_1: entered promiscuous mode [ 580.080754][ T5249] Bluetooth: hci6: command tx timeout [ 580.166305][ T5599] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.339786][ T5599] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.592793][T10669] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1290'. [ 580.801561][ T5599] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.902627][ T5249] Bluetooth: hci0: adv larger than maximum supported [ 580.902706][ T5249] Bluetooth: hci0: Malformed LE Event: 0x0d [ 580.922890][T10557] chnl_net:caif_netlink_parms(): no params data found [ 580.984051][T10068] veth0_macvtap: entered promiscuous mode [ 581.282291][T10669] loop3: detected capacity change from 0 to 65536 [ 581.303306][T10068] veth1_macvtap: entered promiscuous mode [ 581.324117][T10669] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 581.389937][T10669] XFS (loop3): Ending clean mount [ 581.401312][T10669] XFS (loop3): Quotacheck needed: Please wait. [ 581.503452][T10669] XFS (loop3): Quotacheck: Done. [ 581.807750][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.871509][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.892595][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.927064][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.959648][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.976562][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.996491][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.009588][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.029709][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.040641][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.084177][T10068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.212225][ T5338] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 582.230263][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.261012][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.280239][T10557] bridge_slave_0: entered allmulticast mode [ 582.309466][T10557] bridge_slave_0: entered promiscuous mode [ 582.331204][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.348864][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.360633][T10557] bridge_slave_1: entered allmulticast mode [ 582.378372][T10557] bridge_slave_1: entered promiscuous mode [ 582.413634][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.429099][ T5338] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 582.450906][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 17463, setting to 64 [ 582.462184][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.475293][ T5338] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 582.492219][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.497264][ T5338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.521430][ T5338] usb 5-1: Product: syz [ 582.522143][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.527342][ T5338] usb 5-1: Manufacturer: syz [ 582.549895][ T5338] usb 5-1: SerialNumber: syz [ 582.562493][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.573212][ T5338] usb 5-1: config 0 descriptor?? [ 582.612165][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.632110][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.652349][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.672140][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.702203][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.724294][T10068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.770791][ T5599] bridge_slave_1: left allmulticast mode [ 582.792374][ T5599] bridge_slave_1: left promiscuous mode [ 582.798154][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.804036][ T5338] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 582.833767][ T5599] bridge_slave_0: left allmulticast mode [ 582.833867][ T5338] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 582.839414][ T5599] bridge_slave_0: left promiscuous mode [ 582.839637][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.877059][ T5338] usb 5-1: USB disconnect, device number 3 [ 583.401352][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 583.417663][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.427417][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.459868][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.475250][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 583.484963][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 583.606051][T10710] loop4: detected capacity change from 0 to 2048 [ 583.626511][ T8310] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 583.683682][T10710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.855624][ T8444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.146921][ T5599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.169651][ T5599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.192427][ T5599] bond0 (unregistering): Released all slaves [ 584.356025][T10718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.399131][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'. [ 585.592424][ T5249] Bluetooth: hci3: command tx timeout [ 585.700915][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.750847][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.950714][T10557] team0: Port device team_slave_0 added [ 585.962741][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 585.985826][ T5599] hsr_slave_0: left promiscuous mode [ 586.006375][ T5599] hsr_slave_1: left promiscuous mode [ 586.020159][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.042135][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.053116][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.060526][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.121772][ T5599] veth1_macvtap: left promiscuous mode [ 586.142215][ T5599] veth0_macvtap: left promiscuous mode [ 586.148011][ T5599] veth1_vlan: left promiscuous mode [ 586.162132][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 586.171659][ T5599] veth0_vlan: left promiscuous mode [ 586.179335][ T58] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 586.192006][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 586.223402][ T58] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 586.243235][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.257262][ T58] usb 5-1: Product: syz [ 586.268037][ T58] usb 5-1: Manufacturer: syz [ 586.280464][ T58] usb 5-1: SerialNumber: syz [ 586.298128][ T58] usb 5-1: config 0 descriptor?? [ 586.328492][ T58] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 586.358810][ T58] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 586.558192][T10734] loop3: detected capacity change from 0 to 32768 [ 586.622738][T10734] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 586.710239][T10734] XFS (loop3): Ending clean mount [ 586.737917][T10734] XFS (loop3): Quotacheck needed: Please wait. [ 586.828020][T10734] XFS (loop3): Quotacheck: Done. [ 586.929843][ T8310] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 586.947877][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.000075][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.010239][ T58] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 587.053575][ T58] em28xx 5-1:0.0: Config register raw data: 0x52 [ 587.262958][ T58] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 587.280182][ T58] em28xx 5-1:0.0: No AC97 audio processor [ 587.463232][ T5599] team0 (unregistering): Port device team_slave_1 removed [ 587.561934][ T5599] team0 (unregistering): Port device team_slave_0 removed [ 587.672753][ T5249] Bluetooth: hci3: command tx timeout [ 587.969237][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.980080][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.053357][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.075578][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.151019][T10746] loop3: detected capacity change from 0 to 40427 [ 588.168173][T10746] F2FS-fs (loop3): invalid crc value [ 588.190739][T10746] F2FS-fs (loop3): Found nat_bits in checkpoint [ 588.324255][T10746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 588.358717][ T29] audit: type=1800 audit(1726028762.144:98): pid=10746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1303" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 588.377497][T10746] syz.3.1303: attempt to access beyond end of device [ 588.377497][T10746] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 588.452761][T10746] syz.3.1303: attempt to access beyond end of device [ 588.452761][T10746] loop3: rw=2049, sector=77824, nr_sectors = 864 limit=40427 [ 588.520231][T10557] team0: Port device team_slave_1 added [ 588.646171][ T8310] syz-executor: attempt to access beyond end of device [ 588.646171][ T8310] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 588.672553][ T8310] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 588.738078][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.753025][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.812195][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.848594][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.860766][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.887624][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.124623][ T5296] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 589.197860][ T5334] usb 5-1: USB disconnect, device number 4 [ 589.223807][ T5334] em28xx 5-1:0.0: Disconnecting em28xx [ 589.283907][ T5334] em28xx 5-1:0.0: Freeing device [ 589.328371][T10760] loop4: detected capacity change from 0 to 24 [ 589.350643][ T5296] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 589.385862][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 17463, setting to 64 [ 589.463700][ T5296] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 589.480568][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.489810][ T5296] usb 2-1: Product: syz [ 589.501953][ T5296] usb 2-1: Manufacturer: syz [ 589.533526][ T5296] usb 2-1: SerialNumber: syz [ 589.541489][T10557] hsr_slave_0: entered promiscuous mode [ 589.570988][ T5296] usb 2-1: config 0 descriptor?? [ 589.600715][T10557] hsr_slave_1: entered promiscuous mode [ 589.621764][T10557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.643602][T10557] Cannot create hsr debugfs directory [ 589.753400][ T5249] Bluetooth: hci3: command tx timeout [ 589.799455][ T5296] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 589.812302][ T5296] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 589.821537][T10471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.834427][ T5296] usb 2-1: USB disconnect, device number 12 [ 589.950577][T10773] loop3: detected capacity change from 0 to 256 [ 589.983404][T10773] exfat: Deprecated parameter 'utf8' [ 589.991117][T10471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 590.003111][T10773] exfat: Deprecated parameter 'namecase' [ 590.049746][T10773] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x96e02a54, utbl_chksum : 0xe619d30d) [ 590.113386][T10471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 590.188414][T10707] chnl_net:caif_netlink_parms(): no params data found [ 590.256653][T10471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.506123][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 590.535226][T10787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.345380][T10802] loop4: detected capacity change from 0 to 128 [ 591.389380][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.401730][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.440555][T10707] bridge_slave_0: entered allmulticast mode [ 591.452349][ T29] audit: type=1804 audit(1726028765.234:99): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1311" name="/newroot/122/file2/bus" dev="loop4" ino=1048662 res=1 errno=0 [ 591.484400][T10707] bridge_slave_0: entered promiscuous mode [ 591.513898][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.521098][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.530980][ T29] audit: type=1804 audit(1726028765.234:100): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1311" name="/newroot/122/file2/bus" dev="loop4" ino=1048662 res=1 errno=0 [ 591.541441][T10707] bridge_slave_1: entered allmulticast mode [ 591.570495][T10707] bridge_slave_1: entered promiscuous mode [ 591.653669][T10806] syz.4.1311: attempt to access beyond end of device [ 591.653669][T10806] loop4: rw=2049, sector=513, nr_sectors = 528 limit=128 [ 591.796008][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.832589][ T5249] Bluetooth: hci3: command tx timeout [ 591.922880][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.131933][T10707] team0: Port device team_slave_0 added [ 592.265391][T10707] team0: Port device team_slave_1 added [ 592.501022][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.532756][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.543298][T10800] loop3: detected capacity change from 0 to 40427 [ 592.587963][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.599516][T10800] F2FS-fs (loop3): invalid crc value [ 592.630822][T10800] F2FS-fs (loop3): Found nat_bits in checkpoint [ 592.669037][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.711162][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.772338][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.800299][T10800] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 592.827174][T10471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.854325][T10800] syz.3.1314: attempt to access beyond end of device [ 592.854325][T10800] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 592.893248][T10800] syz.3.1314: attempt to access beyond end of device [ 592.893248][T10800] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 592.994387][ T6129] bridge_slave_1: left allmulticast mode [ 593.003972][ T6129] bridge_slave_1: left promiscuous mode [ 593.009782][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.083384][ T6129] bridge_slave_0: left allmulticast mode [ 593.099447][ T6129] bridge_slave_0: left promiscuous mode [ 593.122720][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.130912][ T8310] syz-executor: attempt to access beyond end of device [ 593.130912][ T8310] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 593.168455][ T8310] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 593.275790][T10813] loop4: detected capacity change from 0 to 24 [ 593.924115][T10822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.062492][ T5334] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 594.224071][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.238064][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.249330][ T5334] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 594.252192][ T6129] bond0 (unregistering): Released all slaves [ 594.270709][ T5334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 17463, setting to 64 [ 594.297672][ T5334] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 594.320501][ T5334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.328705][ T5334] usb 5-1: Product: syz [ 594.343957][ T5334] usb 5-1: Manufacturer: syz [ 594.352886][ T5334] usb 5-1: SerialNumber: syz [ 594.390665][ T5334] usb 5-1: config 0 descriptor?? [ 594.450499][T10707] hsr_slave_0: entered promiscuous mode [ 594.484409][T10707] hsr_slave_1: entered promiscuous mode [ 594.509711][T10707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.517780][T10707] Cannot create hsr debugfs directory [ 594.555295][T10471] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.589902][ T6129] hsr_slave_0: left promiscuous mode [ 594.597893][ T6129] hsr_slave_1: left promiscuous mode [ 594.611404][ T5334] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 594.619912][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.628817][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.636168][ T5334] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 594.650890][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.657964][ T5334] usb 5-1: USB disconnect, device number 5 [ 594.682214][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.749313][ T6129] veth1_macvtap: left promiscuous mode [ 594.756597][ T6129] veth0_macvtap: left promiscuous mode [ 594.762376][ T6129] veth1_vlan: left promiscuous mode [ 594.767805][ T6129] veth0_vlan: left promiscuous mode [ 595.439849][T10833] vivid-004: ================= START STATUS ================= [ 595.461900][ T6129] team0 (unregistering): Port device team_slave_1 removed [ 595.471543][T10833] vivid-004: Radio HW Seek Mode: Bounded [ 595.502323][T10833] vivid-004: Radio Programmable HW Seek: false [ 595.525451][T10833] vivid-004: RDS Rx I/O Mode: Block I/O [ 595.544216][T10833] vivid-004: Generate RBDS Instead of RDS: false [ 595.560821][T10833] vivid-004: RDS Reception: true [ 595.568563][ T6129] team0 (unregistering): Port device team_slave_0 removed [ 595.572141][T10833] vivid-004: RDS Program Type: 0 inactive [ 595.581488][T10833] vivid-004: RDS PS Name: inactive [ 595.596273][T10833] vivid-004: RDS Radio Text: inactive [ 595.601967][T10833] vivid-004: RDS Traffic Announcement: false inactive [ 595.618671][T10833] vivid-004: RDS Traffic Program: false inactive [ 595.636798][T10833] vivid-004: RDS Music: false inactive [ 595.649520][T10833] vivid-004: ================== END STATUS ================== [ 596.301406][T10836] loop4: detected capacity change from 0 to 128 [ 596.627602][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 596.659775][T10830] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 596.683286][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.698750][ T5633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.740741][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.747962][ T5633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.776472][T10557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 596.918551][T10557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 597.826266][T10557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 597.874211][T10557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 598.139497][T10852] pimreg: entered allmulticast mode [ 598.259104][T10471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.283385][T10471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.423689][T10849] fuse: Bad value for 'fd' [ 598.574523][T10858] loop4: detected capacity change from 0 to 128 [ 598.693938][T10863] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1333'. [ 598.964760][ T29] audit: type=1804 audit(1726028772.744:101): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1326" name="/newroot/128/file2/bus" dev="loop4" ino=1048663 res=1 errno=0 [ 599.339825][ T29] audit: type=1804 audit(1726028773.074:102): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1326" name="/newroot/128/file2/bus" dev="loop4" ino=1048663 res=1 errno=0 [ 602.229755][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 603.624299][T10557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.685125][T10471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.859599][T10891] loop3: detected capacity change from 0 to 2048 [ 604.037718][T10891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.075548][T10707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 604.142413][T10557] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.192784][T10707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 604.574189][T10471] veth0_vlan: entered promiscuous mode [ 605.356564][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.363847][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.531745][T10707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 605.657345][T10471] veth1_vlan: entered promiscuous mode [ 605.685466][T10903] loop4: detected capacity change from 0 to 128 [ 605.687553][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.698947][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.709169][ T8310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.826374][T10707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.060365][T10471] veth0_macvtap: entered promiscuous mode [ 607.104067][T10914] loop4: detected capacity change from 0 to 128 [ 607.125429][T10471] veth1_macvtap: entered promiscuous mode [ 607.277804][ T5400] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 607.329034][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.378383][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.402312][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.422483][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.452092][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.465065][ T5400] usb 2-1: config 0 has no interfaces? [ 607.472981][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.482910][ T5400] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 607.492699][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.503591][ T5400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.519556][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.531215][ T5400] usb 2-1: config 0 descriptor?? [ 607.543516][T10471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.580404][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.611902][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.632920][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.652357][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.674934][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.695702][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.722998][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.751637][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.793371][T10471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.840678][T10471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.874880][T10471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.909411][T10471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.920659][T10471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.977931][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.071297][T10924] loop3: detected capacity change from 0 to 128 [ 608.110762][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.159575][T10905] bond_slave_0: entered promiscuous mode [ 608.165932][T10905] bond_slave_1: entered promiscuous mode [ 608.212838][T10905] vlan2: entered promiscuous mode [ 608.222994][ T29] audit: type=1804 audit(1726028782.004:103): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1348" name="/newroot/143/file2/bus" dev="loop3" ino=1048664 res=1 errno=0 [ 608.231557][T10905] bond0: entered promiscuous mode [ 608.370880][T10926] loop4: detected capacity change from 0 to 128 [ 608.431216][T10905] vlan2: entered allmulticast mode [ 608.553248][T10926] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 608.585213][T10926] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 608.680298][ T29] audit: type=1804 audit(1726028782.314:104): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1348" name="/newroot/143/file2/bus" dev="loop3" ino=1048664 res=1 errno=0 [ 608.820264][T10905] bond0: entered allmulticast mode [ 608.853008][T10905] bond_slave_0: entered allmulticast mode [ 608.883209][T10905] bond_slave_1: entered allmulticast mode [ 608.932711][T10905] bond0: left allmulticast mode [ 608.947904][T10905] bond_slave_0: left allmulticast mode [ 608.964902][T10905] bond_slave_1: left allmulticast mode [ 608.970446][T10905] bond0: left promiscuous mode [ 609.002797][T10905] bond_slave_0: left promiscuous mode [ 609.008324][T10905] bond_slave_1: left promiscuous mode [ 609.044418][ T8444] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.174970][T10929] syz.3.1348: attempt to access beyond end of device [ 609.174970][T10929] loop3: rw=2049, sector=425, nr_sectors = 616 limit=128 [ 609.335839][ T5334] usb 2-1: USB disconnect, device number 13 [ 609.401514][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.471227][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.478487][ T5599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.551951][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.559211][ T5599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.686231][T10557] veth0_vlan: entered promiscuous mode [ 610.734020][ T5624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.779511][ T5624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.834415][T10557] veth1_vlan: entered promiscuous mode [ 610.893329][ T5624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.916960][ T5624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.046399][T10557] veth0_macvtap: entered promiscuous mode [ 611.110826][T10557] veth1_macvtap: entered promiscuous mode [ 611.214787][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.252120][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.275884][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.302101][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.323082][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.342402][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.373576][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.395462][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.415480][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.438134][T10933] loop4: detected capacity change from 0 to 32768 [ 611.445997][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.474507][T10557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.482994][T10933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1351 (10933) [ 611.550585][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.566198][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.607149][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.622465][T10933] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 611.641821][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.669359][T10933] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 611.680090][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.691384][T10933] BTRFS info (device loop4): using free-space-tree [ 611.701031][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.725249][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.772225][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.813068][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.862530][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.910523][T10557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.008951][T10557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.048240][T10557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.092327][T10557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.101081][T10557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.170086][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.700384][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.772951][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.812450][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.820300][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.964119][ T8444] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 614.527690][T11007] loop2: detected capacity change from 0 to 128 [ 614.586735][T10707] veth0_vlan: entered promiscuous mode [ 614.668331][T10707] veth1_vlan: entered promiscuous mode [ 614.774746][T10975] loop3: detected capacity change from 0 to 32768 [ 614.828774][T10707] veth0_macvtap: entered promiscuous mode [ 614.874030][T10707] veth1_macvtap: entered promiscuous mode [ 614.892403][T10975] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 615.052449][T10975] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop3": -EINTR [ 615.079703][T10975] XFS (loop3): log mount failed [ 615.154176][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.267947][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.107709][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.187984][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.198121][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.224401][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.279753][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.322192][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.334356][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.494924][T11036] loop4: detected capacity change from 0 to 256 [ 616.652651][T11036] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 616.663271][T11036] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 616.673555][T11036] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 616.759108][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.073505][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.202120][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.274512][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.294355][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.306423][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.316486][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.368059][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.403772][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.432958][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.462100][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.482076][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.542202][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.570621][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.599440][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.642215][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.674768][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.764726][T10707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.852267][T10707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.861017][T10707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.344794][T10707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.856154][T11059] overlayfs: missing 'workdir' [ 618.952388][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 619.189574][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.254906][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.292607][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 619.301786][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.323594][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.377528][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.501380][ T9] usb 5-1: config 0 descriptor?? [ 620.227505][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.277923][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.623719][T11054] loop4: detected capacity change from 0 to 512 [ 620.820671][ T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 620.893600][T11054] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.1373: corrupted in-inode xattr: invalid ea_ino [ 621.067233][T11054] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1373: couldn't read orphan inode 12 (err -117) [ 621.078466][T11097] loop5: detected capacity change from 0 to 256 [ 621.183321][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.191134][T11054] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.282958][T11097] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 621.349049][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.412772][ T58] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=20.00 [ 621.423084][T11054] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1373: Directory hole found for htree leaf block 0 [ 621.436446][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.463446][ T58] usb 2-1: config 0 descriptor?? [ 621.868980][T11103] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1373: Directory hole found for htree leaf block 0 [ 622.499337][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 622.553834][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 622.667095][T11112] loop2: detected capacity change from 0 to 128 [ 623.245397][ T29] audit: type=1804 audit(1726028796.624:105): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1389" name="/newroot/11/file2/bus" dev="loop2" ino=1048675 res=1 errno=0 [ 623.266633][ T58] usb 2-1: USB disconnect, device number 14 [ 623.273359][T11112] syz.2.1389: attempt to access beyond end of device [ 623.273359][T11112] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 623.332266][ T29] audit: type=1804 audit(1726028796.644:106): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1389" name="/newroot/11/file2/bus" dev="loop2" ino=1048675 res=1 errno=0 [ 624.323000][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.462928][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 624.491265][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 624.505524][T11121] loop5: detected capacity change from 0 to 128 [ 624.549213][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'. [ 624.569393][ T9] usb 5-1: USB disconnect, device number 6 [ 625.334318][ T8444] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 625.511455][T11145] overlayfs: missing 'workdir' [ 625.902557][T11153] loop4: detected capacity change from 0 to 1024 [ 640.273080][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 640.284134][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 640.292658][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 640.301985][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 640.312753][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 640.320131][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 640.513186][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 640.529210][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 640.545057][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 640.554768][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 640.563282][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 640.570698][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.763141][ T5249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 640.782412][ T5249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 640.790361][ T5249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 640.819767][ T5249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 640.828825][ T5249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 640.842355][ T5249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 640.971652][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 640.982867][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 640.993119][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 641.001311][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 641.059550][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 641.073183][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 641.185505][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.195434][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.203408][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.222962][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.230770][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 641.242933][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.311301][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 641.329802][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 641.338679][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 641.389148][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 641.400415][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 641.408263][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 641.675670][ T6116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.829672][ T6116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.975841][ T6116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.119938][ T6116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.556662][ T5233] Bluetooth: hci1: command tx timeout [ 642.635664][ T5233] Bluetooth: hci5: command tx timeout [ 642.871163][T11169] chnl_net:caif_netlink_parms(): no params data found [ 642.931589][T11164] chnl_net:caif_netlink_parms(): no params data found [ 642.952375][ T5233] Bluetooth: hci6: command tx timeout [ 643.010219][ T6116] bridge_slave_1: left allmulticast mode [ 643.042686][ T6116] bridge_slave_1: left promiscuous mode [ 643.048528][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.058069][ T6116] bridge_slave_0: left allmulticast mode [ 643.063890][ T6116] bridge_slave_0: left promiscuous mode [ 643.069700][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.117165][ T5233] Bluetooth: hci2: command tx timeout [ 643.364974][ T5233] Bluetooth: hci0: command tx timeout [ 643.523480][ T5233] Bluetooth: hci3: command tx timeout [ 643.546923][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.561826][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.573845][ T6116] bond0 (unregistering): Released all slaves [ 643.738401][T11173] chnl_net:caif_netlink_parms(): no params data found [ 643.782878][T11167] chnl_net:caif_netlink_parms(): no params data found [ 643.820956][ T6116] tipc: Left network mode [ 644.014070][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.021345][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.036739][T11164] bridge_slave_0: entered allmulticast mode [ 644.044602][T11164] bridge_slave_0: entered promiscuous mode [ 644.222315][T11175] chnl_net:caif_netlink_parms(): no params data found [ 644.281053][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.296538][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.312491][T11164] bridge_slave_1: entered allmulticast mode [ 644.319854][T11164] bridge_slave_1: entered promiscuous mode [ 644.351663][T11171] chnl_net:caif_netlink_parms(): no params data found [ 644.412491][T11169] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.420701][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.431151][T11169] bridge_slave_0: entered allmulticast mode [ 644.441705][T11169] bridge_slave_0: entered promiscuous mode [ 644.529763][T11164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.590321][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.600135][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.609755][T11169] bridge_slave_1: entered allmulticast mode [ 644.619634][T11169] bridge_slave_1: entered promiscuous mode [ 644.632922][ T5233] Bluetooth: hci1: command tx timeout [ 644.710600][T11164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.720147][ T5233] Bluetooth: hci5: command tx timeout [ 644.909100][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.990114][ T6116] hsr_slave_0: left promiscuous mode [ 644.996531][ T6116] hsr_slave_1: left promiscuous mode [ 645.003361][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.010787][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.018856][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.026328][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.038023][ T5233] Bluetooth: hci6: command tx timeout [ 645.070959][ T6116] veth1_macvtap: left promiscuous mode [ 645.076630][ T6116] veth0_macvtap: left promiscuous mode [ 645.083522][ T6116] veth1_vlan: left promiscuous mode [ 645.088843][ T6116] veth0_vlan: left promiscuous mode [ 645.192773][ T5233] Bluetooth: hci2: command tx timeout [ 645.256668][ T6116] pimreg (unregistering): left allmulticast mode [ 645.432628][ T5233] Bluetooth: hci0: command tx timeout [ 645.594631][ T5233] Bluetooth: hci3: command tx timeout [ 645.811064][ T6116] team0 (unregistering): Port device team_slave_1 removed [ 645.873616][ T6116] team0 (unregistering): Port device team_slave_0 removed [ 646.480526][T11164] team0: Port device team_slave_0 added [ 646.503458][T11164] team0: Port device team_slave_1 added [ 646.522613][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.551919][T11167] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.568072][T11167] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.575969][T11167] bridge_slave_0: entered allmulticast mode [ 646.598403][T11167] bridge_slave_0: entered promiscuous mode [ 646.607622][T11167] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.615737][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.623965][T11167] bridge_slave_1: entered allmulticast mode [ 646.631287][T11167] bridge_slave_1: entered promiscuous mode [ 646.646051][T11173] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.662223][T11173] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.669422][T11173] bridge_slave_0: entered allmulticast mode [ 646.678421][T11173] bridge_slave_0: entered promiscuous mode [ 646.689717][T11173] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.697009][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.704574][T11173] bridge_slave_1: entered allmulticast mode [ 646.711892][T11173] bridge_slave_1: entered promiscuous mode [ 646.712372][ T5233] Bluetooth: hci1: command tx timeout [ 646.792639][ T5233] Bluetooth: hci5: command tx timeout [ 646.965399][T11164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.982213][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.010727][T11164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.027261][T11164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.038476][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.064483][T11164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.084775][T11169] team0: Port device team_slave_0 added [ 647.112621][ T5233] Bluetooth: hci6: command tx timeout [ 647.120989][T11167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.152187][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.159370][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.167001][T11175] bridge_slave_0: entered allmulticast mode [ 647.174688][T11175] bridge_slave_0: entered promiscuous mode [ 647.213866][T11173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.223267][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.230380][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.238094][T11171] bridge_slave_0: entered allmulticast mode [ 647.248346][T11171] bridge_slave_0: entered promiscuous mode [ 647.257707][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.264915][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.272579][ T5233] Bluetooth: hci2: command tx timeout [ 647.278770][T11171] bridge_slave_1: entered allmulticast mode [ 647.286274][T11171] bridge_slave_1: entered promiscuous mode [ 647.314699][T11169] team0: Port device team_slave_1 added [ 647.325096][T11167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.342801][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.349928][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.360907][T11175] bridge_slave_1: entered allmulticast mode [ 647.368899][T11175] bridge_slave_1: entered promiscuous mode [ 647.379770][T11173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.513496][ T5233] Bluetooth: hci0: command tx timeout [ 647.580515][T11171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.602821][T11169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.613364][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.640444][T11169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.672591][ T5233] Bluetooth: hci3: command tx timeout [ 647.706932][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.727216][T11173] team0: Port device team_slave_0 added [ 647.736885][T11173] team0: Port device team_slave_1 added [ 647.811500][T11171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.848157][T11169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.855658][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.888391][T11169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.907136][T11167] team0: Port device team_slave_0 added [ 647.926055][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.014666][T11164] hsr_slave_0: entered promiscuous mode [ 648.028065][T11164] hsr_slave_1: entered promiscuous mode [ 648.034531][T11164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.051875][T11164] Cannot create hsr debugfs directory [ 648.083680][T11167] team0: Port device team_slave_1 added [ 648.131529][T11175] team0: Port device team_slave_0 added [ 648.159475][T11173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.167070][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.193949][T11173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.219194][T11171] team0: Port device team_slave_0 added [ 648.283166][T11167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.290148][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.316328][T11167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.342798][T11175] team0: Port device team_slave_1 added [ 648.350074][T11173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.359839][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.386210][T11173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.400031][T11171] team0: Port device team_slave_1 added [ 648.487757][T11169] hsr_slave_0: entered promiscuous mode [ 648.497145][T11169] hsr_slave_1: entered promiscuous mode [ 648.504351][T11169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.511913][T11169] Cannot create hsr debugfs directory [ 648.518816][T11167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.526498][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.554733][T11167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.643659][T11171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.650655][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.694534][T11171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.708303][T11171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.715694][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.743821][T11171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.792250][ T5233] Bluetooth: hci1: command tx timeout [ 648.876218][ T5233] Bluetooth: hci5: command tx timeout [ 649.033827][T11167] hsr_slave_0: entered promiscuous mode [ 649.046125][T11167] hsr_slave_1: entered promiscuous mode [ 649.057511][T11167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.068694][T11167] Cannot create hsr debugfs directory [ 649.075747][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.083680][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.110171][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.164519][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.171497][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.202541][ T5233] Bluetooth: hci6: command tx timeout [ 649.211236][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.293900][T11173] hsr_slave_0: entered promiscuous mode [ 649.312968][T11173] hsr_slave_1: entered promiscuous mode [ 649.320324][T11173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.341632][T11173] Cannot create hsr debugfs directory [ 649.355235][ T5233] Bluetooth: hci2: command tx timeout [ 649.592327][ T5233] Bluetooth: hci0: command tx timeout [ 649.752289][ T5233] Bluetooth: hci3: command tx timeout [ 649.754634][T11171] hsr_slave_0: entered promiscuous mode [ 649.768006][T11171] hsr_slave_1: entered promiscuous mode [ 649.775116][T11171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.783656][T11171] Cannot create hsr debugfs directory [ 649.873120][ T6116] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.947911][T11175] hsr_slave_0: entered promiscuous mode [ 649.955149][T11175] hsr_slave_1: entered promiscuous mode [ 649.961508][T11175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.971262][T11175] Cannot create hsr debugfs directory [ 650.077171][ T6116] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.356602][ T6116] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.635653][ T6116] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.826858][T11164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.046209][T11164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.212625][T11164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.450325][T11164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.638201][ T6116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.755984][ T6116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.896653][ T6116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.919682][T11164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 651.944441][T11164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 651.991588][T11169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.037906][ T6116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.079514][T11164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 652.110477][T11164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 652.163534][T11169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.288549][T11169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.378421][T11169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.505608][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.571702][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.680662][ T6116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.755299][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.762529][ T5624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.835199][ T6116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.898635][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.905870][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.996572][ T6116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.165206][ T6116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.535240][ T6116] bridge_slave_1: left allmulticast mode [ 653.544315][ T6116] bridge_slave_1: left promiscuous mode [ 653.555753][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.575633][ T6116] bridge_slave_0: left allmulticast mode [ 653.581295][ T6116] bridge_slave_0: left promiscuous mode [ 653.602580][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.616167][ T6116] ip6gretap0: left allmulticast mode [ 653.621473][ T6116] ip6gretap0: left promiscuous mode [ 653.646262][ T6116] bridge0: port 3(ip6gretap0) entered disabled state [ 653.664882][ T6116] bridge_slave_1: left allmulticast mode [ 653.670568][ T6116] bridge_slave_1: left promiscuous mode [ 653.691372][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.704643][ T6116] bridge_slave_0: left allmulticast mode [ 653.710312][ T6116] bridge_slave_0: left promiscuous mode [ 653.730391][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.746945][ T6116] bridge_slave_1: left allmulticast mode [ 653.772228][ T6116] bridge_slave_1: left promiscuous mode [ 653.778059][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.805993][ T6116] bridge_slave_0: left allmulticast mode [ 653.811694][ T6116] bridge_slave_0: left promiscuous mode [ 653.831132][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.861339][ T6116] bridge_slave_1: left allmulticast mode [ 653.878695][ T6116] bridge_slave_1: left promiscuous mode [ 653.884861][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.910366][ T6116] bridge_slave_0: left allmulticast mode [ 653.917230][ T6116] bridge_slave_0: left promiscuous mode [ 653.932918][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.962413][ T6116] bridge_slave_1: left allmulticast mode [ 653.968111][ T6116] bridge_slave_1: left promiscuous mode [ 653.986351][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.004882][ T6116] bridge_slave_0: left allmulticast mode [ 654.010555][ T6116] bridge_slave_0: left promiscuous mode [ 654.030850][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.888159][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.901054][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.930679][ T6116] bond0 (unregistering): Released all slaves [ 656.080296][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.098846][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.114899][ T6116] bond0 (unregistering): Released all slaves [ 656.131025][ T6116] bond1 (unregistering): Released all slaves [ 656.289392][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.301976][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.317387][ T6116] bond0 (unregistering): Released all slaves [ 656.472549][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.485400][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.497324][ T6116] bond0 (unregistering): Released all slaves [ 656.514165][ T6116] bond1 (unregistering): Released all slaves [ 656.533273][ T6116] bond2 (unregistering): Released all slaves [ 656.750306][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.773819][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.785400][ T6116] bond0 (unregistering): Released all slaves [ 657.206956][T11173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 657.241637][ T6116] tipc: Left network mode [ 657.380230][T11173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 657.394259][T11173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 657.419112][T11173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 657.445806][ T6116] tipc: Left network mode [ 657.660444][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.037070][T11164] veth0_vlan: entered promiscuous mode [ 658.172875][T11164] veth1_vlan: entered promiscuous mode [ 658.423334][T11167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 658.468271][T11173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.473322][ T30] INFO: task syz.0.1087:9765 blocked for more than 149 seconds. [ 658.502570][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 658.510341][T11167] netdevsim netdevsim1 netdevsim1: renamed from eth1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 658.517225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 658.527828][ T30] task:syz.0.1087 state:D stack:23352 pid:9765 tgid:9763 ppid:8441 flags:0x00004006 [ 658.538407][ T30] Call Trace: [ 658.541712][ T30] [ 658.545249][ T30] __schedule+0x1800/0x4a60 [ 658.549823][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.557237][ T30] ? __pfx___schedule+0x10/0x10 [ 658.562436][ T30] ? __blk_flush_plug+0x449/0x500 [ 658.639788][ T30] ? __pfx_lock_release+0x10/0x10 [ 658.647097][ T30] ? __blk_flush_plug+0x449/0x500 [ 658.662099][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 658.669091][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 658.682089][ T30] ? schedule+0x90/0x320 [ 658.686378][ T30] schedule+0x14b/0x320 [ 658.690549][ T30] io_schedule+0x8d/0x110 [ 658.702115][ T30] folio_wait_bit_common+0x882/0x12b0 [ 658.707576][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 658.715864][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 658.721468][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 658.727615][ T30] z_erofs_runqueue+0xa8c/0x2010 [ 658.733708][ T30] ? __pfx_z_erofs_runqueue+0x10/0x10 [ 658.739148][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.745296][ T30] ? _raw_spin_unlock+0x28/0x50 [ 658.750187][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.756316][ T30] ? lockref_put_or_lock+0x75/0xc0 [ 658.761457][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.768033][ T30] z_erofs_readahead+0xbae/0xf00 [ 658.775622][ T30] ? __pfx_z_erofs_readahead+0x10/0x10 [ 658.781129][ T30] ? __pfx_lock_release+0x10/0x10 [ 658.787346][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.793454][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.799135][ T30] ? blk_start_plug+0x70/0x1b0 [ 658.804525][ T30] read_pages+0x180/0x840 [ 658.808898][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 658.814302][ T30] ? __pfx_read_pages+0x10/0x10 [ 658.819198][ T30] ? filemap_add_folio+0x26d/0x650 [ 658.824641][ T30] ? __pfx_filemap_add_folio+0x10/0x10 [ 658.830133][ T30] ? page_rmappable_folio+0x9a/0x310 [ 658.836466][ T30] page_cache_ra_unbounded+0x6ce/0x7f0 [ 658.841972][ T30] force_page_cache_ra+0x280/0x2f0 [ 658.847171][ T30] generic_fadvise+0x528/0x840 [ 658.851976][ T30] ? __pfx_generic_fadvise+0x10/0x10 [ 658.857360][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.863934][ T30] ? __fget_files+0x3f6/0x470 [ 658.868649][ T30] ? __fget_files+0x29/0x470 [ 658.875129][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.880818][ T30] __x64_sys_fadvise64+0x145/0x190 [ 658.886095][ T30] do_syscall_64+0xf3/0x230 [ 658.890634][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.896978][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.903052][ T30] RIP: 0033:0x7f2fae97def9 [ 658.907503][ T30] RSP: 002b:00007f2faf796038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 658.916005][ T30] RAX: ffffffffffffffda RBX: 00007f2faeb35f80 RCX: 00007f2fae97def9 [ 658.924170][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 658.932246][ T30] RBP: 00007f2fae9f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 658.940232][ T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 658.948690][ T30] R13: 0000000000000000 R14: 00007f2faeb35f80 R15: 00007ffcdeced068 [ 658.957421][ T30] [ 658.960661][ T30] [ 658.960661][ T30] Showing all locks held in the system: [ 658.984900][ T30] 1 lock held by khungtaskd/30: [ 658.989869][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 659.012669][ T30] 3 locks held by kworker/1:1/46: [ 659.017801][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 659.041599][ T30] #1: ffffc90000b67d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 659.058152][ T30] #2: ffff88804cbd6240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 659.068399][ T30] 2 locks held by dhcpcd/4895: [ 659.073329][ T30] #0: ffff8880287d6678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 659.084688][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 659.093608][ T30] 2 locks held by getty/4985: [ 659.098287][ T30] #0: ffff888034d180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 659.108203][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 659.118976][ T30] 3 locks held by kworker/0:3/5244: [ 659.124257][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 659.135344][ T30] #1: ffffc9000328fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 659.148199][ T30] #2: ffff88804c7ad240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 659.158434][ T30] 3 locks held by kworker/u8:12/5599: [ 659.164562][ T30] #0: ffff88802f841948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 659.176336][ T30] #1: ffffc90004cbfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 659.190993][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 659.210897][ T30] 3 locks held by kworker/u8:26/6113: [ 659.216422][ T30] #0: ffff88801d723148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 659.228124][ T30] #1: ffffc90018387d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 659.242369][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 659.253218][ T30] 6 locks held by kworker/u8:27/6116: [ 659.258603][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 659.269591][ T30] #1: ffffc900182a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 659.281210][ T30] #2: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 659.292325][ T30] #3: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 659.303657][ T30] #4: ffff888078e00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_stop+0x3e9/0x4a0 [ 659.313613][ T30] #5: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 659.324851][ T30] 1 lock held by syz.0.1087/9765: [ 659.329892][ T30] #0: ffff88805b810330 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 659.341160][ T30] 1 lock held by syz-executor/11164: [ 659.346516][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 659.356144][ T30] 1 lock held by syz-executor/11167: [ 659.361482][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 659.372474][ T30] 4 locks held by syz-executor/11169: [ 659.377895][ T30] #0: ffff88802fcd6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 659.389007][ T30] #1: ffff888034e20888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 659.398924][ T30] #2: ffff888027f5aa58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 659.409451][ T30] #3: ffffffff8f5265e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 659.419921][ T30] 7 locks held by syz-executor/11171: [ 659.425370][ T30] #0: ffff88802fcd6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 659.434969][ T30] #1: ffff88804b265488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 659.444852][ T30] #2: ffff888027f5ab48 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 659.454993][ T30] #3: ffffffff8f5265e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 659.465387][ T30] #4: ffff88806a9c90e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 659.476045][ T30] #5: ffff88806a9ca250 (&devlink->lock_key#14){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 659.488827][ T30] #6: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 659.498386][ T30] 1 lock held by syz-executor/11173: [ 659.503753][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 659.517121][ T30] 4 locks held by syz-executor/11175: [ 659.522559][ T30] #0: ffff88802fcd6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 659.531515][ T30] #1: ffff8880557f5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 659.541406][ T30] #2: ffff888027f5ab48 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 659.551746][ T30] #3: ffffffff8f5265e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 659.562248][ T30] [ 659.571968][ T30] ============================================= [ 659.571968][ T30] [ 659.592056][ T30] NMI backtrace for cpu 1 [ 659.596409][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 659.606925][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 659.616992][ T30] Call Trace: [ 659.620272][ T30] [ 659.623209][ T30] dump_stack_lvl+0x241/0x360 [ 659.627906][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.633111][ T30] ? __pfx__printk+0x10/0x10 [ 659.637715][ T30] ? vprintk_emit+0x667/0x7c0 [ 659.642413][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 659.647456][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 659.652412][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 659.657895][ T30] ? _printk+0xd5/0x120 [ 659.662067][ T30] ? __pfx__printk+0x10/0x10 [ 659.666671][ T30] ? __wake_up_klogd+0xcc/0x110 [ 659.671520][ T30] ? __pfx__printk+0x10/0x10 [ 659.676114][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 659.681773][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 659.686820][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 659.692838][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 659.699032][ T30] watchdog+0xff4/0x1040 [ 659.703310][ T30] ? watchdog+0x1ea/0x1040 [ 659.707752][ T30] ? __pfx_watchdog+0x10/0x10 [ 659.712445][ T30] kthread+0x2f2/0x390 [ 659.716522][ T30] ? __pfx_watchdog+0x10/0x10 [ 659.721214][ T30] ? __pfx_kthread+0x10/0x10 [ 659.725814][ T30] ret_from_fork+0x4d/0x80 [ 659.730245][ T30] ? __pfx_kthread+0x10/0x10 [ 659.734841][ T30] ret_from_fork_asm+0x1a/0x30 [ 659.739638][ T30] [ 659.743786][ T30] Sending NMI from CPU 1 to CPUs 0: [ 659.749015][ C0] NMI backtrace for cpu 0 [ 659.749030][ C0] CPU: 0 UID: 0 PID: 2538 Comm: kworker/u8:10 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 659.749055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 659.749069][ C0] Workqueue: bat_events batadv_nc_worker [ 659.749105][ C0] RIP: 0010:lock_release+0x625/0xa30 [ 659.749140][ C0] Code: 01 0f 85 9a 00 00 00 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 08 dc 8a 00 48 c7 84 24 90 00 00 00 00 00 00 00 9c <8f> 84 24 90 00 00 00 42 80 3c 3b 00 74 08 4c 89 f7 e8 f5 da 8a 00 [ 659.749158][ C0] RSP: 0018:ffffc90009727958 EFLAGS: 00000046 [ 659.749176][ C0] RAX: 0000000000000001 RBX: 1ffff920012e4f3e RCX: ffffc90009727903 [ 659.749193][ C0] RDX: 0000000000000002 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 [ 659.749209][ C0] RBP: ffffc90009727a98 R08: ffffffff901875ef R09: 1ffffffff2030ebd [ 659.749226][ C0] R10: dffffc0000000000 R11: fffffbfff2030ebe R12: 1ffff920012e4f38 [ 659.749242][ C0] R13: 0000000000000246 R14: ffffc900097279f0 R15: dffffc0000000000 [ 659.749262][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 659.749281][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.749297][ C0] CR2: 00007ffe88e6eff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 659.749315][ C0] Call Trace: [ 659.749324][ C0] [ 659.749332][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 659.749364][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 659.749399][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 659.749428][ C0] ? nmi_handle+0x2a/0x5a0 [ 659.749464][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 659.749494][ C0] ? nmi_handle+0x151/0x5a0 [ 659.749516][ C0] ? nmi_handle+0x2a/0x5a0 [ 659.749540][ C0] ? lock_release+0x625/0xa30 [ 659.749571][ C0] ? default_do_nmi+0x63/0x160 [ 659.749604][ C0] ? exc_nmi+0x123/0x1f0 [ 659.749634][ C0] ? end_repeat_nmi+0xf/0x53 [ 659.749677][ C0] ? lock_release+0x625/0xa30 [ 659.749709][ C0] ? lock_release+0x625/0xa30 [ 659.749742][ C0] ? lock_release+0x625/0xa30 [ 659.749774][ C0] [ 659.749781][ C0] [ 659.749793][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 659.749825][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 659.749861][ C0] ? __pfx_lock_release+0x10/0x10 [ 659.749891][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 659.749923][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 659.749953][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 659.749989][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 659.750023][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 659.750059][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 659.750094][ C0] _raw_spin_unlock_bh+0x1b/0x40 [ 659.750130][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 659.750167][ C0] batadv_nc_purge_paths+0x312/0x3b0 [ 659.750213][ C0] batadv_nc_worker+0x328/0x610 [ 659.750247][ C0] ? batadv_nc_worker+0xcb/0x610 [ 659.750283][ C0] ? process_scheduled_works+0x945/0x1830 [ 659.750314][ C0] process_scheduled_works+0xa2e/0x1830 [ 659.750368][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 659.750406][ C0] ? assign_work+0x364/0x3d0 [ 659.750440][ C0] worker_thread+0x86d/0xd10 [ 659.750480][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 659.750520][ C0] ? __kthread_parkme+0x169/0x1d0 [ 659.750555][ C0] ? __pfx_worker_thread+0x10/0x10 [ 659.750586][ C0] kthread+0x2f2/0x390 [ 659.750606][ C0] ? __pfx_worker_thread+0x10/0x10 [ 659.750636][ C0] ? __pfx_kthread+0x10/0x10 [ 659.750657][ C0] ret_from_fork+0x4d/0x80 [ 659.750689][ C0] ? __pfx_kthread+0x10/0x10 [ 659.750710][ C0] ret_from_fork_asm+0x1a/0x30 [ 659.750756][ C0] [ 660.190562][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 660.197472][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 660.208263][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 660.218345][ T30] Call Trace: [ 660.221635][ T30] [ 660.224574][ T30] dump_stack_lvl+0x241/0x360 [ 660.229283][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.234588][ T30] ? __pfx__printk+0x10/0x10 [ 660.239193][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 660.245209][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.250891][ T30] ? vscnprintf+0x5d/0x90 [ 660.255223][ T30] panic+0x349/0x860 [ 660.259139][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.264779][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 660.270937][ T30] ? __pfx_panic+0x10/0x10 [ 660.275351][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 660.280721][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.286358][ T30] ? __irq_work_queue_local+0x137/0x410 [ 660.291908][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.297566][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 660.302968][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 660.309142][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 660.315316][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.320966][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 660.327138][ T30] watchdog+0x1033/0x1040 [ 660.331485][ T30] ? watchdog+0x1ea/0x1040 [ 660.335924][ T30] ? __pfx_watchdog+0x10/0x10 [ 660.340614][ T30] kthread+0x2f2/0x390 [ 660.344691][ T30] ? __pfx_watchdog+0x10/0x10 [ 660.349384][ T30] ? __pfx_kthread+0x10/0x10 [ 660.353979][ T30] ret_from_fork+0x4d/0x80 [ 660.358416][ T30] ? __pfx_kthread+0x10/0x10 [ 660.363010][ T30] ret_from_fork_asm+0x1a/0x30 [ 660.367804][ T30] [ 660.371155][ T30] Kernel Offset: disabled [ 660.375478][ T30] Rebooting in 86400 seconds..