last executing test programs: 11m48.78822817s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x12) getdents(r1, 0xfffffffffffffffd, 0xbb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000140)=[@increfs, @request_death, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 11m47.406830628s ago: executing program 0 (id=13): openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f0000000200)) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x6a040000) 11m31.88055834s ago: executing program 32 (id=13): openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f0000000200)) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x6a040000) 10m49.470800743s ago: executing program 1 (id=107): bind$alg(0xffffffffffffffff, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b06, 0x0) 10m46.071105992s ago: executing program 1 (id=119): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 10m43.291358479s ago: executing program 1 (id=124): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x290}], 0x1) 10m42.14548958s ago: executing program 1 (id=128): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'], 0x1, 0x548, &(0x7f0000000640)="$eJzs3d1vFGUbx/HftbPbTpfnoct7VTRNDKG8VdotUoIHArXUhGgC1AMTTArdwkrf0hYDiMCxxyae6CEJJxo9hMR/AI0xHCgx0UQPPDOpB8Z4guaezuzMLgu7tS9L2++H0JmdvXZ3ZtLrnuu+Z2cqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHX3tyP4ua/RaAACA5fTGqZP78xz/AQBYU07T/wcAAADWCpOnn2Xa8cms7Qwez/FPFMcvXR7s66/+shaTKSUviHf//a7ufM+Blw/2RtMnv36xPaM3T50+0n5sYmxyqjA9XRhuHxwvnpsYLtT9Dgt9faXdwQ5oH7t4aXhkZLq9uzNf9vTl3G/N67bmDvf2dLZEsYN9/f2nEjHpzH/+9EfQw0M1TfI0INNPH35uHZJSWngu1Gg7llqL0i7/go0Y7OsPNmS0ODQ+4560VBiVLs+JpihHliEXF6RD2ufWtYmMxsJl5OlPmT4+PGu7JHlRHuwJTgzWfoP0MqxkFW49D0oa0ArIWeAp1SxPd2Qaa/W1u3HpDKAB0vL0kUwTNmt7gnrAHU9d2XzirfbXx0cmErGWCo+oK71/sJyoTfAU8+VpV1Dxz9reRq8MgGXVIk9nZfru1/eCcSUF49Kth3vfOf18coRpW433cbGdkl6qs0+eCccaLeX+Lf52AQAAAAAAAAAAAAAAAACwmvnm6TOZPnjODx4PxF+Qf/iP09jVA7CUzNM9mcZGZs0q7kvhJe7vUbLSr/1Z2vVv8Y9NTF6ZKp6/MFP1+ax/5Oz0zNTQuepPq0V+eA1WpNZ9DCqlw3s4AHXImKcfZLpbvB3/3uTMzf+/MvbWtbgt6Ain0eNku/G4+ap3rJjH9XF++LlcowwAwMKYefpapuNn24LjqikbHGipIYHVz9X/G2S6+ePtuN85V/8/UmbfeiVuF/ywmC/V9EGdv37ufpala4hf2JGcX4z6331u84K2GAAAuPq/WaYH2bbguBrV/5WHXxe3TqbuL7aHcakmVyH44fO54Kc/Uhwt7Hexx2XKrY9iFcRGA4qb4tguF3tdpt8vlMeuD2M3x7HdLvaMTHferx67JY7Nu9h3ZdqXa49isy62LYzdGsd2npsYHV6yHQw8xbLm6aFMv3w1YFEuz40DRPW/V4pNjv/frJiWRPX+mbd3VO0HVCyv+y7WNfoJucSym2F79YdMf99vC9qooF1LV2/XWmXa9u32MG6uTYluErgh+Bm3a70yfd9bHvu/MHZjHNtV72YBjeTy/xuZNt57UPqdD/M/TJU4Q5P5/2y6fBqfO6yS50+YX6z835BYlgvXKzvPfQGsNdNXrl4cGh0tTDHDDDPMlGYa3TIBWGqu/m+T6cY1s6gfG9b/4cO4///X9bj+P1QxLXnMub95nROspkb9vzGx7FDYa8mkJX9mbDKzRfKnr1zdVxwbOl84Xxg/kM/nu3p6ujJNUdc+nqt7zwErn8v/PpnSJ++XxufL+//Vx/+yFdOSBuX/puQ2lfVr6t4VwJrj8v9LmVJ3H5TOoz1p/C8a5+t4sXxa+qM6Dcr/zYlluXC9Wue5LwAAAAAAAAAAAAAAAAAAWCmy5ulTmZqP7rXo3hj1fP93uGJa0qDv/21NLBtepusa697JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICaUvI0KdPdV2fthlvQJu1MTgGsWv8GAAD//1llRoM=") read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001200050926bd7000fbdbdf250a0904004e224e66fbffffff240900000600000006000000fdffffff050000002100000002000000", @ANYRES32=0x0, @ANYBLOB="0a0000090010000006000000ffffffff2200010008911cfa0ae1"], 0x70}, 0x1, 0x0, 0x0, 0x26000001}, 0x800) lstat(0x0, &(0x7f0000009bc0)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x101, 0x10, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000080)={0x21, 0x37, 0x2, {0x2, 0x2, 0x6, 0x0, 0x3, '.@&'}}, 0x21) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x3, 0x8000}, {0x4a, 0x1}, @period={0x5d, 0xa370, 0x3, 0x7f, 0x802, {0x2001, 0x3, 0x4, 0x4}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) 10m37.935204527s ago: executing program 1 (id=137): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x10405, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)={0x10000008}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newneigh={0x1c, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x2, 0x3}}, 0x1c}}, 0x0) 10m31.435064268s ago: executing program 1 (id=144): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r0, 0xffffffffffffffff, 0x0, 0x6) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) 10m16.023528262s ago: executing program 33 (id=144): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r0, 0xffffffffffffffff, 0x0, 0x6) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) 9m24.590970342s ago: executing program 3 (id=263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9m23.265900038s ago: executing program 3 (id=266): socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700), 0x12}, 0x20) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x200080, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x1, 0x3d9, &(0x7f0000000440)="$eJzs3F1P21YYwPHjQFbGJDSpWqGUi9N1F+yiqW1GUNQrzzkJp3Vs6xyngqupGlChQTetnbRyx023SduH6O0+xL5RtY+wyS90vISkLbSJuv9PQuckfnzOc6zID3FkCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJyw7bqeIyId9zfk+cK2SXpDth+N9/mJZsi8Qjj5n5iZEQvlWwtX/9v8WTnIfPlqXszkzYw4+OTap3evTteO9h+S0Hvx5NnBdw+vVDmPO5kx6KpY20T3gq6S2iay1Wy6d9Y7VnZ0pOymzVRPhkYFWWLkcvil9FqtFakam0k/7raDSB29uXbbd92mvNdIVWBsEt+517Dhuo4iHXeLmHxzHrOWfxDv60xmKuhJubO7t70yKsk8yHudIH9UkO/6vuf5vtdcba2uue70mTfcU8SZiPF/aDFel3j2Bi7mn6r+AwAAAACAD5dTXGPPv//Xi+vwjujoSLnjTgsAAAAAAFyi4pf/+byp570F4fD9HwAAAACAD82vI++xq4krzl9/C2PqzmG68YWzH+Rxwf5Uud/U6RGzzqIzVw1SNM3p6lWolpzrZdD1V+HFrOLlzqg8nEtIQPwuFsuYxa2y3TraUs4y29GRaoRJdNcTQTBXy9RG9tPj3Z9Fsfzf4t6cI3Z297Yb336/t1XkcpiPcrhf3UBx5j6KIbk8fXXf4+AV14sLMdW8s+W87vH118rda28w53Nxo4y5MVu2syfXP5PP6TXOW32VhTdg5R+/URZLZczS8q28ubU8IAt/VBb+8Sze6li8RhYro7JYuWAWADAuO6er0EeiqkLF7wGOI0y9Cr1A3Xk/1f25uFnG3FwsTqzTiwPO6O6oM7o7tK5Pj8zizzPPQDivxubz/nGqqr7Id3hx7v8TNvKd/BBOPd3/QVx78uzg9u7+w0fbj7Yf+/5K0/3KdVd9US+WUTXUHgDAAMq8dGazXxxjdPqN12p5QbaupEnC+9LodldJHWfKhOtB3FUyNUmWhEmUdx7otrLS9tM0MZnsJEamidUbxZNfZPXoF6t6QZzp0KaRCqySYRJnQZjJtrahTPtfR9quK1PsbFMV6o4Og0wnsbRJ34SqIaWtqWOBuq3iTHd03o1lanQvMJvyQRL1e0q2lQ2NTrOkHPBoLh13EtMrhm2M+2ADADAhiifY7e1t/3jJHefYyONeIwAAOIkqDQAAAAAAAAAAAAAAAAAAAADA5HtX9//9nzpTQogJSIPOZHUcMRFpvG1n3GcmAO/avwEAAP//Wk+aWQ==") mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000000c0)={0x7fffffff, 0xffff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) 9m19.321633503s ago: executing program 3 (id=273): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 9m13.183274636s ago: executing program 3 (id=279): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 9m11.939212985s ago: executing program 3 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@setlink={0x34, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x40}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}]}, 0x34}}, 0x4000010) 9m9.944550981s ago: executing program 3 (id=288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e20, 0xe2, 0x4e23, 0x7, 0x2, 0x80, 0xa0, 0x20, r4, r5}, {0xfff, 0x4, 0x81, 0xc7a3, 0x9, 0xfffffffffffffffe, 0x2, 0x9}, {0x8000, 0x5, 0x3, 0x1}, 0xfff, 0x6e6bba, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3504, 0x0, 0x1, 0x5, 0x5, 0xd, 0x7fffffff}}, 0xe8) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000340)=""/102, &(0x7f0000000500)=0x66) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8, 0xffffffffffffffff}) close_range(r2, r6, 0x0) ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x7}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r11, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m8.227667899s ago: executing program 34 (id=288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e20, 0xe2, 0x4e23, 0x7, 0x2, 0x80, 0xa0, 0x20, r4, r5}, {0xfff, 0x4, 0x81, 0xc7a3, 0x9, 0xfffffffffffffffe, 0x2, 0x9}, {0x8000, 0x5, 0x3, 0x1}, 0xfff, 0x6e6bba, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3504, 0x0, 0x1, 0x5, 0x5, 0xd, 0x7fffffff}}, 0xe8) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000340)=""/102, &(0x7f0000000500)=0x66) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8, 0xffffffffffffffff}) close_range(r2, r6, 0x0) ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x7}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r11, 0x847ba, 0x0, 0xe, 0x0, 0x0) 42.280905835s ago: executing program 5 (id=1141): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xc, 0x4, 0x0, [], [0xa7200], 0x2}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa350"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000340)=@ethtool_rx_ntuple={0x35, {0x12, @udp_ip4_spec={@empty, @multicast1, 0x4e20, 0x4e22, 0x7}, @tcp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x4e24, 0x4e22, 0x48}, 0x15, 0x217, 0x8, 0x8, 0xfffffffffffffffe}}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f42b99e92a5a3a315f16505ea672c74e7ca3bd1faffab4f7e2200e38fe8304e72dfaa38838d7abdf20519789076e7067"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000ac0141ef1516dfd53bd9482e9c8b000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001800048014000180090001007866726d00000000040002800900010073797a300000000004000740140000001100"], 0xb8}}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 39.296955549s ago: executing program 5 (id=1145): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x14d00) syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1016400, &(0x7f0000000680)=ANY=[], 0x1, 0xc5e, &(0x7f0000001a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) syz_read_part_table(0x1050, &(0x7f0000001080)="$eJzsz8GpwkAUBdCbTBL+XwTEBrKyDxeCCNZhHdZnU5GBCaQBEeGcxcC8uZfhhe8a/47d7vpMUsZ6pE8ebbpkyutec4esSelKzsNWWbZ+SYZrHa9Vf5qTdJf/9tpS0+6zMt8+vB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/IR3AAAA//+x4wn5") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$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") 35.451312584s ago: executing program 5 (id=1152): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f003) truncate(&(0x7f0000000180)='./file1\x00', 0x400000f001) socket$netlink(0x10, 0x3, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 34.287121512s ago: executing program 5 (id=1155): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xc, 0x4, 0x0, [], [0xa7200], 0x2}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa350"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000340)=@ethtool_rx_ntuple={0x35, {0x12, @udp_ip4_spec={@empty, @multicast1, 0x4e20, 0x4e22, 0x7}, @tcp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x4e24, 0x4e22, 0x48}, 0x15, 0x217, 0x8, 0x8, 0xfffffffffffffffe}}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f42b99e92a5a3a315f16505ea672c74e7ca3bd1faffab4f7e2200e38fe8304e72dfaa38838d7abdf20519789076e7067"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000ac0141ef1516dfd53bd9482e9c8b000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001800048014000180090001007866726d00000000040002800900010073797a300000000004000740140000001100"], 0xb8}}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 33.052641037s ago: executing program 5 (id=1157): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$vsock_stream(0x28, 0x1, 0x0) ptrace$setregs(0xf, 0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf25280068fdfa"], 0x28}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0x11, 0x148, 0x340, 0x0, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x9, 0x0, 0x80}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ttl={{0x28}, {0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x1, 0x7fff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 30.346296742s ago: executing program 5 (id=1164): timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000000) r9 = fspick(r3, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x4, 0x8, 0x7f, 0x80, 0x8001, r2}) timer_settime(r0, 0x0, &(0x7f0000004080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000040c0)) 15.113783136s ago: executing program 35 (id=1164): timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000000) r9 = fspick(r3, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x4, 0x8, 0x7f, 0x80, 0x8001, r2}) timer_settime(r0, 0x0, &(0x7f0000004080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000040c0)) 11.595426754s ago: executing program 2 (id=1194): socket$inet(0x2, 0x4000000000000001, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) execve(0x0, &(0x7f0000000280)={[&(0x7f0000000580)='\x00', &(0x7f0000000340)='/dev/cpu/#/msr\x00']}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0xd, 0x20000000, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) 9.962854109s ago: executing program 2 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000040)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) capset(&(0x7f0000000040)={0x20080522, r3}, &(0x7f00000000c0)={0x660, 0x1a96, 0x0, 0x10000, 0xffffffff, 0x2}) rt_sigqueueinfo(r3, 0xb, &(0x7f0000000440)={0x0, 0x0, 0xfffffffb}) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') socket$inet_udp(0x2, 0x2, 0x0) rename(&(0x7f0000000600)='.\x02/file1\x00', 0xffffffffffffffff) 5.25586435s ago: executing program 2 (id=1199): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f00000000c0)={[{@nolazytime}, {@abort}, {@oldalloc}, {@errors_remount}, {@noauto_da_alloc}]}, 0xde, 0x54d, &(0x7f00000008c0)="$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") syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x29}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mknod(&(0x7f0000000180)='./file1\x00', 0x80, 0x9) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) read$FUSE(r1, &(0x7f0000000e40)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r11, 0x26, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r12, 0x7, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x20, 0x1}, [], {0x10, 0x2}}, 0x24, 0x2) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="70696d3672656746c66a93"], 0xb) 4.494131643s ago: executing program 4 (id=1202): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="000000003e9e0000b7080000000000007b8af8ff00000000bfa200020000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x6, 0x23, 0x9, 0xdedb, 0x2, "00000000c89cefe0"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 4.391155677s ago: executing program 2 (id=1203): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x20006, @mcast1, 0xb}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x44004) fremovexattr(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0xc) 3.601864499s ago: executing program 4 (id=1204): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.518269284s ago: executing program 2 (id=1205): r0 = timerfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000001c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10003, 0x0) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000200)=""/69, 0x45}], 0x1) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0x10034) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4}) 3.266807062s ago: executing program 4 (id=1206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.995114579s ago: executing program 2 (id=1207): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000007f40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704acf07fbfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd652932611d6c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x5, 0x483, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x4007) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x2b, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) 1.99477813s ago: executing program 4 (id=1208): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.89375954s ago: executing program 4 (id=1209): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r5, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 0s ago: executing program 4 (id=1210): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): 0, exp 2 for type 0 [ 563.291778][ T9553] loop2: detected capacity change from 0 to 1024 [ 564.161549][ T9550] loop4: detected capacity change from 0 to 4096 [ 565.186905][ T9178] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.211610][ T9550] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 565.217131][ T9266] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 566.076606][ T9550] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 566.076668][ T9266] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 566.094633][ T9550] EXT4-fs: failed to create workqueue [ 566.100272][ T9550] EXT4-fs (loop4): mount failed [ 566.139068][ T9266] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 566.427465][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.432405][ T5877] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 566.434688][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.490864][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.498105][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.604978][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.643674][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.660032][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.679771][ T5877] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.689539][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.730125][ T5877] usb 5-1: config 0 descriptor?? [ 567.066670][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.109170][ T9315] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 567.155265][ T9315] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 567.253259][ T5877] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 567.365711][ T9315] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 567.427553][ T9315] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 567.467737][ T30] audit: type=1326 audit(1756020973.216:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.2.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe90398ebe9 code=0x0 [ 567.521658][ T9266] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.659716][ C0] plantronics 0003:047F:FFFF.000D: hid_field_extract() called with n (132) > 32! (syz-executor) [ 567.801197][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.808436][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.850744][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.857967][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.407342][ T5889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.422240][ T5889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.433125][ T5889] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.443281][ T5889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.469581][ T5889] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.527552][ T9599] loop2: detected capacity change from 0 to 164 [ 568.783917][ T6001] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 569.171155][ T9266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 569.283891][ T9266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.594409][ T5889] Bluetooth: hci1: command tx timeout [ 571.161736][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 571.202456][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 571.272448][ T9] usb 5-1: USB disconnect, device number 24 [ 571.766648][ T9624] loop2: detected capacity change from 0 to 1024 [ 572.050519][ T9315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.103553][ T2998] bridge_slave_1: left allmulticast mode [ 572.113882][ T2998] bridge_slave_1: left promiscuous mode [ 572.142569][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.175074][ T2998] bridge_slave_0: left allmulticast mode [ 572.188904][ T2998] bridge_slave_0: left promiscuous mode [ 572.207968][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.531517][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.537945][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.602524][ T5889] Bluetooth: hci1: command tx timeout [ 572.942786][ T5961] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 573.072692][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.097291][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.103429][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 573.132226][ T5961] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.135232][ T2998] bond0 (unregistering): Released all slaves [ 573.173927][ T5961] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.191923][ T5961] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 573.201593][ T5961] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 573.231356][ T5961] usb 3-1: Product: syz [ 573.250691][ T5961] usb 3-1: Manufacturer: syz [ 573.276828][ T5961] hub 3-1:4.0: USB hub found [ 575.223217][ T5889] Bluetooth: hci1: command tx timeout [ 575.943600][ T5961] hub 3-1:4.0: 2 ports detected [ 576.213025][ T9664] loop4: detected capacity change from 0 to 512 [ 576.247633][ T9664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.319628][ T9664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 576.369316][ T9664] System zones: 1-12 [ 576.382464][ T2998] hsr_slave_0: left promiscuous mode [ 576.425149][ T2998] hsr_slave_1: left promiscuous mode [ 576.431381][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.453362][ T9664] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.825: bg 0: block 328: padding at end of block bitmap is not set [ 576.493843][ T9664] EXT4-fs (loop4): Remounting filesystem read-only [ 576.501644][ T9664] EXT4-fs (loop4): 1 orphan inode deleted [ 576.501822][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.523246][ T9664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.563984][ T5961] usb 3-1: USB disconnect, device number 11 [ 577.210067][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.255828][ T5885] Bluetooth: hci1: command tx timeout [ 577.560964][ T9683] loop2: detected capacity change from 0 to 1024 [ 577.583534][ T9683] EXT4-fs: Ignoring removed orlov option [ 577.591176][ T9683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.645808][ T9683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.704045][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 577.751751][ T30] audit: type=1800 audit(1756020983.516:368): pid=9683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.829" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 577.811286][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 577.890368][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.051668][ T9693] loop2: detected capacity change from 0 to 128 [ 578.099380][ T9693] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 578.157545][ T9693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.673761][ T9698] usb usb8: usbfs: process 9698 (syz.2.830) did not claim interface 0 before use [ 579.143451][ T9315] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.249906][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.257073][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.335674][ T9266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.422143][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.429432][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.544172][ T9710] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 579.551863][ T9710] netlink: 'syz.2.831': attribute type 2 has an invalid length. [ 579.971525][ T9715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.833'. [ 580.749899][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 581.023817][ T9725] cgroup: Unknown subsys name 'cpuset' [ 583.170833][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.193780][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.201107][ T9595] bridge_slave_0: entered allmulticast mode [ 583.222937][ T9595] bridge_slave_0: entered promiscuous mode [ 583.247119][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.274480][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.281819][ T9595] bridge_slave_1: entered allmulticast mode [ 583.299466][ T9595] bridge_slave_1: entered promiscuous mode [ 583.449271][ T9749] loop4: detected capacity change from 0 to 128 [ 583.481863][ T9751] loop5: detected capacity change from 0 to 512 [ 583.543124][ T9751] EXT4-fs: Ignoring removed nobh option [ 583.644831][ T9751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.785264][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.939346][ T9751] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.839: iget: bad i_size value: 15393162788874 [ 584.070583][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.289838][ T5889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 584.303627][ T5889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 584.319922][ T5889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.332874][ T5889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 584.374166][ T9595] team0: Port device team_slave_0 added [ 584.394846][ T5889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 584.413662][ T9595] team0: Port device team_slave_1 added [ 584.503927][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.655729][ T9768] loop4: detected capacity change from 0 to 128 [ 584.704033][ T9768] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 584.728715][ T9768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.203792][ T9777] cramfs: Unknown parameter 'discard' [ 585.765256][ T9315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.843844][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.871298][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.929627][ T9773] usb usb8: usbfs: process 9773 (syz.4.841) did not claim interface 0 before use [ 586.016300][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.051027][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.080573][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.173240][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.381152][ T9793] loop5: detected capacity change from 0 to 2048 [ 586.392726][ T9776] batadv_slave_1: entered promiscuous mode [ 586.399626][ T9776] batadv_slave_1: left promiscuous mode [ 586.539520][ T5885] Bluetooth: hci5: command tx timeout [ 587.277284][ T9595] hsr_slave_0: entered promiscuous mode [ 587.285807][ T9595] hsr_slave_1: entered promiscuous mode [ 587.292223][ T9595] debugfs: 'hsr0' already exists in 'hsr' [ 587.322839][ T9595] Cannot create hsr debugfs directory [ 587.481103][ T9808] loop2: detected capacity change from 0 to 512 [ 588.592717][ T9815] loop4: detected capacity change from 0 to 1024 [ 588.602920][ T5885] Bluetooth: hci5: command tx timeout [ 589.084198][ T2982] hfsplus: b-tree write err: -5, ino 4 [ 589.420001][ T9817] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 589.476589][ T5889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.488352][ T5889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.504676][ T5889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.537053][ T5889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.546373][ T5889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.205396][ T9830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.852'. [ 590.239534][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 590.259224][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 590.702465][ T5889] Bluetooth: hci5: command tx timeout [ 591.071769][ T9840] cramfs: Unknown parameter 'discard' [ 591.644555][ T5889] Bluetooth: hci2: command tx timeout [ 591.910148][ T9762] chnl_net:caif_netlink_parms(): no params data found [ 592.022061][ T9844] loop5: detected capacity change from 0 to 128 [ 592.098970][ T9844] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 592.154992][ T9844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.217115][ T9848] loop2: detected capacity change from 0 to 512 [ 592.253712][ T9848] EXT4-fs: Ignoring removed i_version option [ 592.737276][ T9848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.769293][ T9854] usb usb8: usbfs: process 9854 (syz.5.856) did not claim interface 0 before use [ 592.772481][ T5889] Bluetooth: hci5: command tx timeout [ 593.393207][ T2998] bridge_slave_1: left allmulticast mode [ 593.398892][ T2998] bridge_slave_1: left promiscuous mode [ 593.404747][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.435872][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.451017][ T2998] bridge_slave_0: left allmulticast mode [ 593.481466][ T2998] bridge_slave_0: left promiscuous mode [ 593.507529][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.575325][ T9861] loop4: detected capacity change from 0 to 1764 [ 593.722683][ T5889] Bluetooth: hci2: command tx timeout [ 594.509211][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 595.080155][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.127517][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.184119][ T2998] bond0 (unregistering): Released all slaves [ 595.805347][ T5889] Bluetooth: hci2: command tx timeout [ 595.972272][ T2998] hsr_slave_0: left promiscuous mode [ 596.116219][ T30] audit: type=1326 audit(1756021001.876:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.4.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x0 [ 596.243628][ T2998] hsr_slave_1: left promiscuous mode [ 596.287430][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.379644][ T9895] cramfs: Unknown parameter 'discard' [ 597.183210][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.366441][ T5889] Bluetooth: hci2: command tx timeout [ 600.147995][ T5885] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 600.336437][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 600.555081][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 601.506541][ T9916] loop4: detected capacity change from 0 to 256 [ 602.224505][ T9921] loop2: detected capacity change from 0 to 128 [ 602.233379][ T9921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 602.249605][ T9921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.716815][ T9929] netlink: 52 bytes leftover after parsing attributes in process `syz.2.878'. [ 603.728232][ T30] audit: type=1326 audit(1756021009.496:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.4.879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x0 [ 603.781075][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 603.790244][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 603.946486][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.955053][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.967520][ T9762] bridge_slave_0: entered allmulticast mode [ 604.080199][ T9762] bridge_slave_0: entered promiscuous mode [ 604.132886][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.165035][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.186970][ T9762] bridge_slave_1: entered allmulticast mode [ 604.195966][ T9762] bridge_slave_1: entered promiscuous mode [ 604.685420][ T9762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.726834][ T9762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.769036][ T9952] loop4: detected capacity change from 0 to 4096 [ 604.810779][ T9952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.039571][ T9762] team0: Port device team_slave_0 added [ 605.223837][ T9762] team0: Port device team_slave_1 added [ 605.296015][ T9960] loop2: detected capacity change from 0 to 1024 [ 605.468961][ T9961] syz.2.885: attempt to access beyond end of device [ 605.468961][ T9961] loop2: rw=0, sector=395262, nr_sectors = 2 limit=1024 [ 606.108601][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.119293][ T9963] loop5: detected capacity change from 0 to 128 [ 606.152247][ T9963] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 606.154738][ T9825] chnl_net:caif_netlink_parms(): no params data found [ 606.211199][ T9963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.241649][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.282820][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.367375][ T9762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.530495][ T9965] loop4: detected capacity change from 0 to 1024 [ 606.615624][ T9965] EXT4-fs: Invalid want_extra_isize 5 [ 607.737112][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.778575][ T9963] usb usb8: usbfs: process 9963 (syz.5.886) did not claim interface 0 before use [ 607.794154][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.866917][ T9762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.920101][ T9595] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 608.561819][ T9595] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 608.847671][ T9985] loop2: detected capacity change from 0 to 1024 [ 608.851110][ T9595] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 609.067120][ T9989] loop5: detected capacity change from 0 to 256 [ 609.104719][ T9989] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 609.164956][ T9985] hfsplus: xattr search failed [ 609.251176][ T30] audit: type=1800 audit(1756021015.006:371): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.892" name="bus" dev="loop5" ino=1048635 res=0 errno=0 [ 609.297059][ T9991] loop4: detected capacity change from 0 to 512 [ 609.329386][ T5870] hfsplus: node 4:3 still has 1 user(s)! [ 609.490992][ T9595] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 609.557216][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.592782][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.601903][ T9991] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 609.619219][ T9825] bridge_slave_0: entered allmulticast mode [ 609.634734][ T9825] bridge_slave_0: entered promiscuous mode [ 609.647472][ T9993] loop2: detected capacity change from 0 to 1024 [ 609.671430][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.709952][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.743404][ T9991] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.893: bg 0: block 16: invalid block bitmap [ 609.772612][ T9825] bridge_slave_1: entered allmulticast mode [ 609.804838][ T9991] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 609.825987][ T9825] bridge_slave_1: entered promiscuous mode [ 609.863234][ T9762] hsr_slave_0: entered promiscuous mode [ 609.869717][ T9762] hsr_slave_1: entered promiscuous mode [ 609.875933][ T69] hfsplus: b-tree write err: -5, ino 4 [ 609.900175][ T9991] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.893: invalid indirect mapped block 5 (level 0) [ 609.920643][ T9991] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.893: invalid indirect mapped block 4294967295 (level 1) [ 609.944552][ T9762] debugfs: 'hsr0' already exists in 'hsr' [ 609.951301][ T9991] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.893: invalid indirect mapped block 4294967295 (level 2) [ 609.988535][ T9762] Cannot create hsr debugfs directory [ 610.045458][ T9991] EXT4-fs (loop4): 1 truncate cleaned up [ 610.110676][ T9991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.210818][T10001] loop2: detected capacity change from 0 to 4096 [ 610.293449][T10001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.649168][ T9991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.344790][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.485274][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.518545][T10014] loop5: detected capacity change from 0 to 1024 [ 611.628693][T10014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.643465][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.738624][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 611.918339][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.175269][ T49] bridge_slave_1: left allmulticast mode [ 614.182033][ T49] bridge_slave_1: left promiscuous mode [ 614.191622][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.223805][ T49] bridge_slave_0: left allmulticast mode [ 614.242567][ T49] bridge_slave_0: left promiscuous mode [ 614.248492][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.446207][T10026] loop2: detected capacity change from 0 to 136 [ 614.481818][T10026] iso9660: Unknown parameter '01777777777777777777777' [ 615.186918][T10032] loop4: detected capacity change from 0 to 256 [ 615.263323][T10032] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 615.776179][T10036] loop4: detected capacity change from 0 to 128 [ 615.785598][T10036] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 615.809642][T10036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 616.543826][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.570380][T10040] loop5: detected capacity change from 0 to 128 [ 616.598929][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.625118][T10040] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 616.652101][ T49] bond0 (unregistering): Released all slaves [ 616.903741][T10040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.337373][ T9825] team0: Port device team_slave_0 added [ 617.364360][ T9825] team0: Port device team_slave_1 added [ 617.801239][ T49] hsr_slave_0: left promiscuous mode [ 617.807359][ T49] hsr_slave_1: left promiscuous mode [ 617.825260][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.847496][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.158665][ T49] team0 (unregistering): Port device team_slave_1 removed [ 621.265088][ T49] team0 (unregistering): Port device team_slave_0 removed [ 622.115615][T10059] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 622.492134][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.506094][T10065] loop4: detected capacity change from 0 to 512 [ 622.558252][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.595881][T10065] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 622.596094][ T9825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.731659][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.757515][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.839017][T10065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.914: bg 0: block 16: invalid block bitmap [ 622.866043][ T9825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.880479][T10065] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 622.960849][T10065] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.914: invalid indirect mapped block 5 (level 0) [ 623.003363][T10065] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.914: invalid indirect mapped block 4294967295 (level 1) [ 623.063355][T10065] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.914: invalid indirect mapped block 4294967295 (level 2) [ 623.117236][T10075] loop5: detected capacity change from 0 to 136 [ 623.160980][T10075] iso9660: Unknown parameter '01777777777777777777777' [ 623.189143][T10065] EXT4-fs (loop4): 1 truncate cleaned up [ 623.274832][ T9825] hsr_slave_0: entered promiscuous mode [ 623.279581][T10065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.317347][ T9825] hsr_slave_1: entered promiscuous mode [ 623.361160][ T9825] debugfs: 'hsr0' already exists in 'hsr' [ 623.386156][ T9825] Cannot create hsr debugfs directory [ 623.748046][T10065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.784420][T10097] loop2: detected capacity change from 0 to 128 [ 626.841526][T10097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 626.865101][T10097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.496065][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.140684][ T9762] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 628.232190][T10104] usb usb8: usbfs: process 10104 (syz.2.920) did not claim interface 0 before use [ 628.293479][ T9762] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 628.400001][ T9762] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 628.498909][ T9762] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 632.142235][T10128] loop5: detected capacity change from 0 to 512 [ 632.161615][T10128] EXT4-fs: inline encryption not supported [ 632.268929][T10128] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 632.371154][T10128] EXT4-fs (loop5): 1 truncate cleaned up [ 632.417736][T10128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.937657][T10135] loop4: detected capacity change from 0 to 1024 [ 633.753370][T10134] hfsplus: can't free extent [ 633.763502][T10128] mmap: syz.5.926 (10128) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 633.837718][ T5889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.848403][ T5889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.857431][ T5889] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.865705][ T5889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.875346][ T5889] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.015931][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.022910][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.285949][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.514280][T10148] siw: device registration error -23 [ 635.904524][T10151] loop4: detected capacity change from 0 to 136 [ 635.930362][T10151] iso9660: Unknown parameter '01777777777777777777777' [ 636.122465][ T5889] Bluetooth: hci1: command tx timeout [ 636.200724][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.703170][ T9825] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 636.755779][ T9825] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 636.843119][ T30] audit: type=1326 audit(1756021042.596:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.5.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 636.917272][ T9825] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 636.936262][ T30] audit: type=1326 audit(1756021042.596:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.5.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 636.969777][ T9825] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 637.025322][ T30] audit: type=1326 audit(1756021042.606:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.5.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 637.128169][ T9762] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.132573][ T30] audit: type=1326 audit(1756021042.646:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.5.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 637.193889][T10166] loop2: detected capacity change from 0 to 512 [ 637.225818][ T30] audit: type=1326 audit(1756021042.656:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.5.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 637.563542][T10166] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 638.272444][ T5889] Bluetooth: hci1: command tx timeout [ 638.395352][T10166] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm syz.2.932: bg 0: block 16: invalid block bitmap [ 638.469283][T10166] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 638.501007][T10166] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.932: invalid indirect mapped block 5 (level 0) [ 638.536494][T10166] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.932: invalid indirect mapped block 4294967295 (level 1) [ 638.610787][T10166] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.932: invalid indirect mapped block 4294967295 (level 2) [ 638.665549][T10166] EXT4-fs (loop2): 1 truncate cleaned up [ 638.698312][T10166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.741631][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.748888][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.892995][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.900200][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.926243][T10166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.929403][T10187] loop5: detected capacity change from 0 to 4096 [ 639.059530][ T6191] bridge_slave_1: left allmulticast mode [ 639.102452][ T6191] bridge_slave_1: left promiscuous mode [ 639.134968][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.198260][T10187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.274489][ T6191] bridge_slave_0: left allmulticast mode [ 639.290666][ T6191] bridge_slave_0: left promiscuous mode [ 639.329171][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.923042][ T6001] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 640.096711][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 640.139960][ T6001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.151971][ T6001] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 640.190738][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.234854][ T6001] usb 5-1: Product: syz [ 640.261445][ T6001] usb 5-1: Manufacturer: syz [ 640.286471][ T5889] Bluetooth: hci1: command tx timeout [ 640.292053][ T6001] usb 5-1: SerialNumber: syz [ 640.307797][ T6001] usb 5-1: config 0 descriptor?? [ 640.808156][T10206] loop2: detected capacity change from 0 to 2048 [ 640.899148][ T6191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.946059][ T6191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.965101][ T6001] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 640.972207][ T6001] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 641.087164][ T6191] bond0 (unregistering): Released all slaves [ 641.189918][ T5843] usb 5-1: USB disconnect, device number 25 [ 641.573520][ T6191] hsr_slave_0: left promiscuous mode [ 641.602343][ T6191] hsr_slave_1: left promiscuous mode [ 641.613798][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.654258][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.182804][T10220] loop2: detected capacity change from 0 to 8192 [ 642.390426][ T5889] Bluetooth: hci1: command tx timeout [ 642.701169][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.792913][ T8529] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 643.003083][ T8529] usb 5-1: Using ep0 maxpacket: 8 [ 643.018933][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 643.046287][ T8529] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.078464][ T8529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 643.100973][ T8529] usb 5-1: New USB device found, idVendor=056a, idProduct=20ba, bcdDevice= 0.00 [ 643.151475][ T8529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.190975][ T8529] usb 5-1: config 0 descriptor?? [ 643.201010][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 643.735343][T10242] cramfs: Unknown parameter 'discard' [ 644.408316][T10239] siw: device registration error -23 [ 644.920847][ T8529] wacom 0003:056A:20BA.000E: unknown main item tag 0x0 [ 644.976828][ T8529] wacom 0003:056A:20BA.000E: unknown main item tag 0x0 [ 645.009881][ T8529] wacom 0003:056A:20BA.000E: unknown main item tag 0x0 [ 645.025535][ T8529] wacom 0003:056A:20BA.000E: unknown main item tag 0x0 [ 645.043339][ T8529] wacom 0003:056A:20BA.000E: unknown main item tag 0x0 [ 645.072686][ T8529] usb 5-1: USB disconnect, device number 26 [ 645.705319][T10136] chnl_net:caif_netlink_parms(): no params data found [ 645.773820][ T9825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.961298][ T9825] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.973832][T10248] loop2: detected capacity change from 0 to 1024 [ 646.019397][T10248] ext4: Unknown parameter 'fscontext' [ 650.434033][ T5885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 650.473276][ T5885] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 650.489941][ T5885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.499448][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.511584][ T5885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.529403][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.538428][ T5885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 650.553033][T10136] bridge_slave_0: entered allmulticast mode [ 650.614716][T10136] bridge_slave_0: entered promiscuous mode [ 650.636061][T10265] loop5: detected capacity change from 0 to 128 [ 650.712929][T10265] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 650.731402][T10265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.213890][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.241046][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.282585][T10136] bridge_slave_1: entered allmulticast mode [ 651.290730][T10136] bridge_slave_1: entered promiscuous mode [ 651.872082][T10136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.909122][T10266] usb usb8: usbfs: process 10266 (syz.5.947) did not claim interface 0 before use [ 651.956605][T10136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.113164][ T5889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.123668][ T5889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.140436][ T5889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.148986][ T5889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.165317][ T5889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.353845][T10136] team0: Port device team_slave_0 added [ 652.500793][T10136] team0: Port device team_slave_1 added [ 652.603067][ T5889] Bluetooth: hci5: command tx timeout [ 653.190403][T10136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.199661][ T5889] Bluetooth: hci2: command tx timeout [ 655.680375][ T5885] Bluetooth: hci5: command tx timeout [ 655.785852][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.854488][T10136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.112543][T10280] loop2: detected capacity change from 0 to 512 [ 656.136277][T10280] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 656.216628][T10136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.226238][T10280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm syz.2.948: bg 0: block 16: invalid block bitmap [ 656.240181][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.271867][T10280] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 656.281237][T10136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.303215][T10280] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.948: invalid indirect mapped block 5 (level 0) [ 656.417115][T10280] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.948: invalid indirect mapped block 4294967295 (level 1) [ 656.499031][T10280] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.948: invalid indirect mapped block 4294967295 (level 2) [ 656.553392][T10280] EXT4-fs (loop2): 1 truncate cleaned up [ 656.679296][T10280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.802864][T10280] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.150462][T10136] hsr_slave_0: entered promiscuous mode [ 657.189307][T10136] hsr_slave_1: entered promiscuous mode [ 657.255565][T10136] debugfs: 'hsr0' already exists in 'hsr' [ 657.269859][T10136] Cannot create hsr debugfs directory [ 657.587156][T10285] loop5: detected capacity change from 0 to 2048 [ 657.722501][ T5885] Bluetooth: hci5: command tx timeout [ 657.729065][ T5885] Bluetooth: hci2: command tx timeout [ 658.715316][T10293] loop5: detected capacity change from 0 to 8192 [ 659.387347][T10262] chnl_net:caif_netlink_parms(): no params data found [ 659.694183][T10299] loop2: detected capacity change from 0 to 512 [ 659.751842][T10299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 659.842524][T10299] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 659.852172][ T5889] Bluetooth: hci2: command tx timeout [ 659.857856][ T5885] Bluetooth: hci5: command tx timeout [ 660.284371][T10304] cramfs: Unknown parameter 'discard' [ 661.300340][T10308] loop4: detected capacity change from 0 to 128 [ 661.311215][T10268] chnl_net:caif_netlink_parms(): no params data found [ 661.319039][T10308] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 661.369575][T10308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 661.899369][ T5885] Bluetooth: hci2: command tx timeout [ 661.968485][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'. [ 662.060918][T10315] loop5: detected capacity change from 0 to 128 [ 662.390809][T10313] vlan2: entered promiscuous mode [ 662.400677][T10313] bridge0: entered promiscuous mode [ 663.614597][T10262] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.629833][T10262] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.648642][T10262] bridge_slave_0: entered allmulticast mode [ 663.672145][T10262] bridge_slave_0: entered promiscuous mode [ 664.057724][T10262] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.068395][T10262] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.076393][T10262] bridge_slave_1: entered allmulticast mode [ 664.143591][T10329] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 664.897996][T10262] bridge_slave_1: entered promiscuous mode [ 664.945196][T10331] loop4: detected capacity change from 0 to 128 [ 664.960398][T10331] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 664.987841][T10331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.313258][T10334] loop5: detected capacity change from 0 to 128 [ 665.326656][T10334] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 665.339793][T10334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.927747][T10262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.125545][T10335] usb usb8: usbfs: process 10335 (syz.4.960) did not claim interface 0 before use [ 666.326802][ T6191] bridge_slave_1: left allmulticast mode [ 666.452538][ T6191] bridge_slave_1: left promiscuous mode [ 666.461349][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.583480][ T6191] bridge_slave_0: left allmulticast mode [ 666.589191][ T6191] bridge_slave_0: left promiscuous mode [ 666.620726][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.668310][ T6191] bridge_slave_1: left allmulticast mode [ 666.688239][ T6191] bridge_slave_1: left promiscuous mode [ 666.899219][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.949084][ T6191] bridge_slave_0: left allmulticast mode [ 666.954838][ T6191] bridge_slave_0: left promiscuous mode [ 666.965683][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.049627][T10344] cramfs: Unknown parameter 'discard' [ 668.478647][T10348] loop5: detected capacity change from 0 to 1024 [ 668.809392][T10348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.577398][T10348] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4182: comm syz.5.965: Allocating blocks 497-513 which overlap fs metadata [ 670.363058][T10348] EXT4-fs (loop5): pa ffff88807e34fd98: logic 256, phys. 385, len 8 [ 670.371462][T10348] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5433: group 0, free 0, pa_free 1 [ 670.440279][T10363] loop2: detected capacity change from 0 to 128 [ 670.504767][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 670.638923][T10363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 670.871189][T10365] loop4: detected capacity change from 0 to 512 [ 670.939211][T10365] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 671.180994][T10365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.969: bg 0: block 16: invalid block bitmap [ 671.464383][T10365] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 671.648272][T10365] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.969: invalid indirect mapped block 5 (level 0) [ 671.683376][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.693187][T10365] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.969: invalid indirect mapped block 4294967295 (level 1) [ 671.862491][T10365] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.969: invalid indirect mapped block 4294967295 (level 2) [ 671.928215][T10365] EXT4-fs (loop4): 1 truncate cleaned up [ 671.940457][T10365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.955815][ T6191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.991305][ T6191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.004378][ T6191] bond0 (unregistering): Released all slaves [ 672.454517][T10373] 9pnet_fd: Insufficient options for proto=fd [ 673.257050][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.916953][T10387] loop5: detected capacity change from 0 to 4096 [ 674.040824][ T6191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.081285][T10387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.114100][ T6191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.196723][ T6191] bond0 (unregistering): Released all slaves [ 674.675358][T10262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.356776][T10268] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.485245][T10268] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.492616][T10268] bridge_slave_0: entered allmulticast mode [ 675.502415][T10268] bridge_slave_0: entered promiscuous mode [ 675.583036][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.686236][T10262] team0: Port device team_slave_0 added [ 675.723350][T10262] team0: Port device team_slave_1 added [ 675.810572][T10402] netlink: 52 bytes leftover after parsing attributes in process `syz.2.979'. [ 675.862017][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'. [ 675.935330][T10268] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.936883][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 675.966389][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.975238][T10268] bridge_slave_1: entered allmulticast mode [ 676.224262][T10268] bridge_slave_1: entered promiscuous mode [ 676.495982][T10400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.630748][ T6191] hsr_slave_0: left promiscuous mode [ 676.652896][ T6191] hsr_slave_1: left promiscuous mode [ 676.673440][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.681972][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.817591][ T6191] hsr_slave_0: left promiscuous mode [ 676.832180][ T6191] hsr_slave_1: left promiscuous mode [ 676.838997][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.850493][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.373171][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 678.420630][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 679.833166][T10414] loop4: detected capacity change from 0 to 128 [ 679.879955][T10414] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 679.952015][T10414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.033482][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 680.612239][T10421] loop5: detected capacity change from 0 to 512 [ 680.959392][T10421] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 681.014281][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 681.062815][T10421] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.982: bg 0: block 16: invalid block bitmap [ 681.117884][T10421] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 681.153345][T10421] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.982: invalid indirect mapped block 5 (level 0) [ 681.172903][T10421] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.982: invalid indirect mapped block 4294967295 (level 1) [ 681.197537][T10421] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.982: invalid indirect mapped block 4294967295 (level 2) [ 681.253893][T10421] EXT4-fs (loop5): 1 truncate cleaned up [ 681.261160][T10421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.823442][T10428] 9pnet_fd: Insufficient options for proto=fd [ 681.971848][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.418323][T10437] loop4: detected capacity change from 0 to 256 [ 682.427444][T10437] exfat: Unknown parameter '' [ 682.731949][T10262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.739431][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.768060][T10262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.962425][T10262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.973611][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.052898][T10262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.079511][T10446] loop2: detected capacity change from 0 to 1024 [ 683.140180][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.226307][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.179021][T10262] hsr_slave_0: entered promiscuous mode [ 684.223889][T10262] hsr_slave_1: entered promiscuous mode [ 684.230550][T10262] debugfs: 'hsr0' already exists in 'hsr' [ 684.248469][T10262] Cannot create hsr debugfs directory [ 684.374261][T10268] team0: Port device team_slave_0 added [ 684.667354][T10136] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 684.702995][T10268] team0: Port device team_slave_1 added [ 687.400490][T10136] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 687.595093][T10136] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 687.680433][T10136] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 687.755833][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.763970][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.790936][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.869964][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.877856][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.926507][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.516144][T10479] loop4: detected capacity change from 0 to 128 [ 688.545774][T10479] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 688.563313][T10479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.338378][T10268] hsr_slave_0: entered promiscuous mode [ 689.368792][T10268] hsr_slave_1: entered promiscuous mode [ 689.403530][T10268] debugfs: 'hsr0' already exists in 'hsr' [ 689.412816][T10268] Cannot create hsr debugfs directory [ 691.290124][T10490] loop5: detected capacity change from 0 to 512 [ 692.463186][T10491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'. [ 692.532134][T10490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.602962][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.998'. [ 692.611881][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 692.656752][T10490] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.763216][T10490] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1000: corrupted inode contents [ 692.831094][T10490] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1000: mark_inode_dirty error [ 692.859561][T10490] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1000: corrupted inode contents [ 692.914403][T10490] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1000: mark_inode_dirty error [ 694.123439][ T5889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.137175][ T5889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.146703][ T5889] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 695.647603][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.654724][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.677651][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 695.813768][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 696.457436][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.101396][T10511] cramfs: Unknown parameter 'discard' [ 698.000306][ T30] audit: type=1326 audit(1756021103.756:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10512 comm="syz.4.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x0 [ 698.124177][ T5882] Bluetooth: hci1: command tx timeout [ 699.130108][ T30] audit: type=1326 audit(1756021104.886:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 699.232390][ T30] audit: type=1326 audit(1756021104.886:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 699.364114][ T30] audit: type=1326 audit(1756021104.886:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 700.292561][ T5882] Bluetooth: hci1: command tx timeout [ 700.364912][ T30] audit: type=1326 audit(1756021104.886:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 700.429032][ T30] audit: type=1326 audit(1756021104.886:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 700.458099][ T30] audit: type=1326 audit(1756021104.886:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 700.493600][ T30] audit: type=1326 audit(1756021104.886:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 700.520982][ T30] audit: type=1326 audit(1756021104.886:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 700.545942][ T6101] bridge_slave_1: left allmulticast mode [ 700.553565][ T6101] bridge_slave_1: left promiscuous mode [ 700.559383][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.567345][T10537] loop4: detected capacity change from 0 to 128 [ 700.592875][T10537] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 700.619486][ T30] audit: type=1326 audit(1756021104.916:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5f278ebe9 code=0x7ffc0000 [ 700.648541][T10537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.745232][ T6101] bridge_slave_0: left allmulticast mode [ 700.881821][ T6101] bridge_slave_0: left promiscuous mode [ 701.903464][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.886175][ T5882] Bluetooth: hci1: command tx timeout [ 703.217832][T10545] loop4: detected capacity change from 0 to 128 [ 703.884584][T10545] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 703.941177][T10545] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 704.030871][ T6101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.052874][ T6101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.363014][ T6101] bond0 (unregistering): Released all slaves [ 704.997188][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 705.082387][ T5882] Bluetooth: hci1: command tx timeout [ 705.195378][ T6101] hsr_slave_0: left promiscuous mode [ 705.226929][ T6101] hsr_slave_1: left promiscuous mode [ 705.238075][T10555] loop4: detected capacity change from 0 to 136 [ 705.245804][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.273768][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.276951][T10556] loop5: detected capacity change from 0 to 512 [ 707.265395][T10555] iso9660: Unknown parameter '01777777777777777777777' [ 707.275056][T10556] EXT4-fs: Mount option(s) incompatible with ext2 [ 707.805860][ T6101] team0 (unregistering): Port device team_slave_1 removed [ 707.893408][ T6101] team0 (unregistering): Port device team_slave_0 removed [ 708.855231][T10268] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 708.950351][T10268] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 709.883658][T10268] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 709.974492][ T5885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 709.984782][ T5885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 709.994060][ T5885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 710.005030][ T5885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 710.014375][ T5885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 711.142579][T10268] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 711.195344][T10502] chnl_net:caif_netlink_parms(): no params data found [ 711.442822][T10592] netlink: 'syz.2.1023': attribute type 13 has an invalid length. [ 711.482740][T10592] bridge_slave_1: left allmulticast mode [ 711.488442][T10592] bridge_slave_1: left promiscuous mode [ 711.522885][T10592] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.616536][T10593] loop4: detected capacity change from 0 to 128 [ 711.635034][T10593] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 711.651537][T10593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 711.883708][T10595] loop5: detected capacity change from 0 to 128 [ 711.946494][T10595] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 712.042697][ T5885] Bluetooth: hci6: command tx timeout [ 712.046289][T10595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 712.166536][T10599] loop2: detected capacity change from 0 to 512 [ 712.225780][T10599] EXT4-fs: Ignoring removed mblk_io_submit option [ 712.654126][T10599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.216211][T10595] usb usb8: usbfs: process 10595 (syz.5.1025) did not claim interface 0 before use [ 713.534527][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.568408][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 713.582701][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 713.632162][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 713.634173][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 713.634196][ T30] audit: type=1326 audit(1756021119.386:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.4.1027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x0 [ 713.674296][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 713.685901][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 713.888927][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.904337][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.001561][T10502] bridge_slave_0: entered allmulticast mode [ 714.218906][T10614] loop2: detected capacity change from 0 to 512 [ 714.219406][T10502] bridge_slave_0: entered promiscuous mode [ 714.258723][ T5885] Bluetooth: hci6: command tx timeout [ 714.412340][T10614] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 714.445465][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.457902][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.468670][T10502] bridge_slave_1: entered allmulticast mode [ 714.479697][T10614] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm syz.2.1028: bg 0: block 16: invalid block bitmap [ 714.503498][T10502] bridge_slave_1: entered promiscuous mode [ 714.519343][T10614] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 714.575589][T10614] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.1028: invalid indirect mapped block 5 (level 0) [ 714.642470][T10614] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.1028: invalid indirect mapped block 4294967295 (level 1) [ 714.786700][T10614] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.1028: invalid indirect mapped block 4294967295 (level 2) [ 714.869394][T10614] EXT4-fs (loop2): 1 truncate cleaned up [ 714.886040][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.915412][T10614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.993022][T10618] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1029'. [ 715.026755][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.041622][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1029'. [ 715.128230][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1029'. [ 715.386340][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.802445][ T5885] Bluetooth: hci2: command tx timeout [ 716.362742][ T5885] Bluetooth: hci6: command tx timeout [ 716.438733][T10502] team0: Port device team_slave_0 added [ 716.491506][T10502] team0: Port device team_slave_1 added [ 717.066755][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 717.260013][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 717.290097][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.358497][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.359083][ T9] usb 5-1: config 0 descriptor?? [ 717.402576][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.455504][ T9] cp210x 5-1:0.0: cp210x converter detected [ 717.659418][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.684847][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.691842][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.772290][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.879702][T10578] chnl_net:caif_netlink_parms(): no params data found [ 717.922550][ T5885] Bluetooth: hci2: command tx timeout [ 718.065621][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 718.200580][T10669] loop2: detected capacity change from 0 to 8 [ 718.280877][T10669] SQUASHFS error: Unable to read inode 0x127 [ 718.492562][ T5885] Bluetooth: hci6: command tx timeout [ 718.956789][T10670] siw: device registration error -23 [ 719.406965][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 719.418744][T10673] loop2: detected capacity change from 0 to 128 [ 719.440744][ T9] usb 5-1: USB disconnect, device number 27 [ 719.482486][T10673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 719.485930][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 719.590261][T10673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.666808][ T9] cp210x 5-1:0.0: device disconnected [ 719.979330][ T5885] Bluetooth: hci2: command tx timeout [ 720.451425][T10679] usb usb8: usbfs: process 10679 (syz.2.1039) did not claim interface 0 before use [ 720.842315][ T30] audit: type=1326 audit(1756021126.516:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.5.1040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x0 [ 721.127907][T10692] loop4: detected capacity change from 0 to 16 [ 721.400317][T10692] erofs (device loop4): mounted with root inode @ nid 36. [ 721.403003][T10502] hsr_slave_0: entered promiscuous mode [ 721.448609][T10502] hsr_slave_1: entered promiscuous mode [ 721.541785][T10502] debugfs: 'hsr0' already exists in 'hsr' [ 721.571523][T10502] Cannot create hsr debugfs directory [ 721.787606][T10697] loop5: detected capacity change from 0 to 128 [ 721.795860][ T6101] bridge_slave_1: left allmulticast mode [ 721.801544][ T6101] bridge_slave_1: left promiscuous mode [ 721.816478][T10697] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 721.851522][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.851754][T10697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.945229][ T6101] bridge_slave_0: left allmulticast mode [ 721.950935][ T6101] bridge_slave_0: left promiscuous mode [ 722.185466][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.193115][ T5885] Bluetooth: hci2: command tx timeout [ 722.797249][T10697] usb usb8: usbfs: process 10697 (syz.5.1042) did not claim interface 0 before use [ 722.843145][T10703] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1043'. [ 722.890381][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 722.899858][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 723.191207][ T6101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.247102][ T6101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.264673][ T6101] bond0 (unregistering): Released all slaves [ 723.459389][T10709] loop4: detected capacity change from 0 to 512 [ 723.544392][T10709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 723.724728][T10709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 723.737738][T10709] System zones: 0-2, 18-18, 34-34 [ 723.748053][T10709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.873045][T10709] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.894882][T10578] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.902067][T10578] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.974924][T10578] bridge_slave_0: entered allmulticast mode [ 724.035011][T10578] bridge_slave_0: entered promiscuous mode [ 724.129398][T10709] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 724.179677][ T6101] hsr_slave_0: left promiscuous mode [ 724.199812][ T6101] hsr_slave_1: left promiscuous mode [ 724.218926][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.510490][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.530232][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.640044][T10740] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1049'. [ 725.941886][T10747] loop4: detected capacity change from 0 to 128 [ 725.952543][T10747] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 725.966980][ T30] audit: type=1326 audit(1756021131.666:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.5.1052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5f278ebe9 code=0x0 [ 726.011195][T10747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.106741][ T6101] team0 (unregistering): Port device team_slave_1 removed [ 726.448617][ T6101] team0 (unregistering): Port device team_slave_0 removed [ 726.525911][T10754] loop4: detected capacity change from 0 to 128 [ 726.579927][T10754] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 726.603838][T10754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 727.227572][T10760] usb usb8: usbfs: process 10760 (syz.4.1054) did not claim interface 0 before use [ 727.584462][T10759] loop5: detected capacity change from 0 to 512 [ 727.695340][T10759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 727.852546][T10759] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 728.145912][T10766] loop4: detected capacity change from 0 to 2048 [ 728.392047][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 728.420318][T10578] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.448972][T10578] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.492697][T10578] bridge_slave_1: entered allmulticast mode [ 728.551453][T10578] bridge_slave_1: entered promiscuous mode [ 728.981505][T10608] chnl_net:caif_netlink_parms(): no params data found [ 729.447007][T10578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.471061][T10578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.573092][T10776] loop5: detected capacity change from 0 to 4096 [ 729.775545][T10578] team0: Port device team_slave_0 added [ 729.794000][T10776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.345224][T10578] team0: Port device team_slave_1 added [ 730.509856][T10798] loop4: detected capacity change from 0 to 8192 [ 730.529152][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.226194][T10804] loop5: detected capacity change from 0 to 128 [ 731.253577][T10804] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 731.995813][T10804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 732.220887][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.229318][T10810] input: syz1 as /devices/virtual/input/input11 [ 732.237903][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.253395][T10608] bridge_slave_0: entered allmulticast mode [ 732.287231][T10608] bridge_slave_0: entered promiscuous mode [ 732.340564][T10578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.372595][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.460214][T10578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.496790][T10578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.504392][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.574709][T10578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.627330][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.654184][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.681718][T10608] bridge_slave_1: entered allmulticast mode [ 732.698138][T10608] bridge_slave_1: entered promiscuous mode [ 732.706057][T10812] loop5: detected capacity change from 0 to 4096 [ 732.750084][T10812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.769200][T10578] hsr_slave_0: entered promiscuous mode [ 733.784466][T10578] hsr_slave_1: entered promiscuous mode [ 733.803263][T10578] debugfs: 'hsr0' already exists in 'hsr' [ 733.809052][T10578] Cannot create hsr debugfs directory [ 733.995958][T10608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.020600][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.015131][T10608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.059810][T10832] loop2: detected capacity change from 0 to 512 [ 735.234802][T10832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.398821][T10832] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 735.500886][T10608] team0: Port device team_slave_0 added [ 735.609166][T10608] team0: Port device team_slave_1 added [ 735.629425][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.865318][T10842] loop2: detected capacity change from 0 to 512 [ 735.944974][T10842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.125801][T10842] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 736.259887][T10842] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1069: corrupted inode contents [ 736.304691][T10608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.316399][T10842] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1069: mark_inode_dirty error [ 736.333781][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.397073][T10842] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1069: corrupted inode contents [ 736.427971][T10842] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1069: mark_inode_dirty error [ 736.444659][T10608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.530022][T10608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.818218][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.852173][T10608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.207628][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.420838][T10855] loop4: detected capacity change from 0 to 128 [ 738.501068][T10855] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 738.742757][T10855] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 738.775478][T10855] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 738.994832][T10855] UDF-fs: Scanning with blocksize 512 failed [ 739.727512][T10855] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 739.748173][T10867] loop5: detected capacity change from 0 to 128 [ 739.796671][T10867] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 739.811166][T10855] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 739.863318][T10855] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 739.874758][T10867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 739.906920][T10855] UDF-fs: Scanning with blocksize 1024 failed [ 739.925729][T10608] hsr_slave_0: entered promiscuous mode [ 739.937157][T10608] hsr_slave_1: entered promiscuous mode [ 739.965846][T10608] debugfs: 'hsr0' already exists in 'hsr' [ 739.971616][T10608] Cannot create hsr debugfs directory [ 740.014434][T10855] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 740.071820][T10872] loop2: detected capacity change from 0 to 128 [ 740.080025][T10872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 740.103449][T10872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.146411][T10855] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 740.179900][T10855] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 740.215353][T10855] UDF-fs: Scanning with blocksize 2048 failed [ 740.377306][T10855] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 740.501060][T10855] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 740.775235][T10855] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 740.872836][T10855] UDF-fs: Scanning with blocksize 4096 failed [ 740.878967][T10855] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 741.044775][T10875] loop5: detected capacity change from 0 to 2048 [ 741.052775][T10855] loop4: detected capacity change from 0 to 512 [ 741.086879][T10855] EXT4-fs (loop4): Test dummy encryption mode enabled [ 741.122799][T10855] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 741.165310][T10855] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 741.245398][T10855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.291320][T10502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 742.230047][T10502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 742.430509][T10888] binder: 10886:10888 ioctl 4018620d 0 returned -22 [ 742.473191][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.557354][T10502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 742.610694][ T2982] bridge_slave_1: left allmulticast mode [ 742.639010][ T2982] bridge_slave_1: left promiscuous mode [ 742.662659][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.676053][T10892] loop4: detected capacity change from 0 to 764 [ 742.703872][ T2982] bridge_slave_0: left allmulticast mode [ 742.730146][ T2982] bridge_slave_0: left promiscuous mode [ 742.746714][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.081256][T10898] loop4: detected capacity change from 0 to 1024 [ 743.105623][T10898] ext4: Unknown parameter 'fscontext' [ 743.583017][T10901] loop5: detected capacity change from 0 to 8192 [ 745.124402][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.226316][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.332495][ T2982] bond0 (unregistering): Released all slaves [ 745.422506][T10502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 746.007944][ T2982] hsr_slave_0: left promiscuous mode [ 746.026798][ T2982] hsr_slave_1: left promiscuous mode [ 746.046073][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.151522][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.758881][T10929] loop5: detected capacity change from 0 to 128 [ 746.793849][T10929] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 746.844824][T10929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 747.586217][T10930] usb usb8: usbfs: process 10930 (syz.5.1085) did not claim interface 0 before use [ 748.073560][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 748.615365][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 748.693265][T10940] loop4: detected capacity change from 0 to 128 [ 748.701362][T10940] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 748.716964][T10940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.943571][T10944] loop5: detected capacity change from 0 to 1024 [ 748.959185][T10944] ext4: Unknown parameter 'context' [ 749.272299][T10953] siw: device registration error -23 [ 749.807648][T10955] loop5: detected capacity change from 0 to 1024 [ 749.838644][T10955] ext4: Unknown parameter 'fscontext' [ 753.170369][T10966] loop2: detected capacity change from 0 to 512 [ 753.403318][T10966] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1091: iget: bad i_size value: 38620345925642 [ 753.482454][T10966] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1091: couldn't read orphan inode 15 (err -117) [ 753.506927][T10966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.579235][T10971] loop4: detected capacity change from 0 to 8 [ 753.661747][T10971] SQUASHFS error: Unable to read inode 0x127 [ 754.065992][T10966] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1091: iget: bad i_size value: 38620345925642 [ 754.376131][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.432133][T10578] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 754.678074][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.688863][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.703209][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.714565][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.723541][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.431340][T10983] loop2: detected capacity change from 0 to 128 [ 755.440997][T10578] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 755.468801][T10983] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 755.492037][T10578] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 755.521194][T10983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 755.872812][T10985] loop5: detected capacity change from 0 to 128 [ 755.925138][T10985] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 756.970192][ T5882] Bluetooth: hci1: command tx timeout [ 756.978061][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.928280][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.983445][T10985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 758.452395][T10578] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 758.453770][T10987] usb usb8: usbfs: process 10987 (syz.2.1095) did not claim interface 0 before use [ 759.004079][ T5882] Bluetooth: hci1: command tx timeout [ 759.304644][T10995] usb usb8: usbfs: process 10995 (syz.5.1097) did not claim interface 0 before use [ 759.830820][T10608] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 759.990366][T10608] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 760.070921][T10608] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 760.190947][T11005] loop5: detected capacity change from 0 to 1024 [ 760.234377][T10608] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 760.318946][T11005] hfsplus: small dir entry [ 760.701511][ T2982] bridge_slave_1: left allmulticast mode [ 760.766869][T11018] siw: device registration error -23 [ 760.868447][ T2982] bridge_slave_1: left promiscuous mode [ 761.023694][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.082597][ T5882] Bluetooth: hci1: command tx timeout [ 761.271575][ T2982] bridge_slave_0: left allmulticast mode [ 761.302383][ T2982] bridge_slave_0: left promiscuous mode [ 761.312716][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.703844][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.726489][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.764848][ T2982] bond0 (unregistering): Released all slaves [ 761.860511][T11028] loop4: detected capacity change from 0 to 128 [ 761.891509][T11028] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 761.920045][T11028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 762.572366][T10578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.756387][ T2982] hsr_slave_0: left promiscuous mode [ 762.792651][ T2982] hsr_slave_1: left promiscuous mode [ 762.801002][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.882133][T11036] loop5: detected capacity change from 0 to 1024 [ 762.896407][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.776325][ T5882] Bluetooth: hci1: command tx timeout [ 765.924809][T11036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.229639][T11050] loop4: detected capacity change from 0 to 512 [ 766.251240][T11049] loop2: detected capacity change from 0 to 2048 [ 766.280532][T11050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.302666][T11050] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.348570][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.686392][T11056] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1112'. [ 766.732034][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 766.747258][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1112'. [ 766.799288][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.842526][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 766.942935][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 767.138436][T11062] loop2: detected capacity change from 0 to 8192 [ 767.497449][T11061] loop4: detected capacity change from 0 to 128 [ 767.518317][T11061] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 767.531368][T11061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 768.287142][T10578] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.354351][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.361527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.479387][T10976] chnl_net:caif_netlink_parms(): no params data found [ 768.801911][T10608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.841425][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.861456][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.870892][T10976] bridge_slave_0: entered allmulticast mode [ 768.885459][T10976] bridge_slave_0: entered promiscuous mode [ 768.896704][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.917611][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.928533][T10976] bridge_slave_1: entered allmulticast mode [ 768.941410][T10976] bridge_slave_1: entered promiscuous mode [ 769.069775][T10976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.108306][T10976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.160521][T10608] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.230596][T10976] team0: Port device team_slave_0 added [ 769.246916][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.254111][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.283773][T10976] team0: Port device team_slave_1 added [ 769.425541][T10976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.452862][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.536183][T10976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.572872][T10976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.592283][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.667210][T10976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.702377][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 769.809462][T11093] loop5: detected capacity change from 0 to 512 [ 769.818205][T11089] loop2: detected capacity change from 0 to 8192 [ 769.844247][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.844588][T11093] EXT4-fs: Ignoring removed mblk_io_submit option [ 769.851498][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.903102][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 769.915514][T11089] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 769.920490][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.932915][T11093] EXT4-fs error (device loop5): __ext4_iget:5464: inode #11: block 1: comm syz.5.1117: invalid block [ 769.963231][T11093] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1117: couldn't read orphan inode 11 (err -117) [ 770.038371][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 770.071670][T11093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.096471][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 770.118563][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 770.129836][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 770.138750][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 770.144475][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.163086][ T5882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 770.173961][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 770.252144][ T9] usb 5-1: config 0 descriptor?? [ 770.371173][ T5872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.405627][T10976] hsr_slave_0: entered promiscuous mode [ 770.416101][T10976] hsr_slave_1: entered promiscuous mode [ 770.433899][T10976] debugfs: 'hsr0' already exists in 'hsr' [ 770.632681][T10976] Cannot create hsr debugfs directory [ 772.148429][ T5941] usb 5-1: USB disconnect, device number 28 [ 772.282576][ T5882] Bluetooth: hci5: command tx timeout [ 773.300867][T11114] loop2: detected capacity change from 0 to 1024 [ 774.286204][T11120] cramfs: Unknown parameter 'discard' [ 775.383839][ T5882] Bluetooth: hci5: command tx timeout [ 776.372442][T11114] EXT4-fs warning (device loop2): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop2. [ 778.312362][ T5882] Bluetooth: hci5: command tx timeout [ 778.347298][T11135] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1124'. [ 779.455058][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'. [ 780.014786][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1124'. [ 780.141258][T11138] loop4: detected capacity change from 0 to 2048 [ 780.362749][ T5882] Bluetooth: hci5: command tx timeout [ 780.611946][T11043] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.622013][T11043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.630577][T11043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.645893][T11043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.658120][T11043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 781.422199][ T36] bridge_slave_1: left allmulticast mode [ 781.428053][ T36] bridge_slave_1: left promiscuous mode [ 781.473995][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.603897][ T36] bridge_slave_0: left allmulticast mode [ 781.621226][ T36] bridge_slave_0: left promiscuous mode [ 781.643551][T11155] loop2: detected capacity change from 0 to 128 [ 781.658357][T11155] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 781.671594][T11155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 781.688803][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.716576][T11156] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 781.723161][T11156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 781.739689][T11156] vhci_hcd vhci_hcd.0: Device attached [ 781.813365][T11159] loop5: detected capacity change from 0 to 512 [ 782.202725][ T5843] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 782.683918][ T5882] Bluetooth: hci2: command tx timeout [ 785.832474][T11043] Bluetooth: hci2: command tx timeout [ 787.255422][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.370366][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.467792][ T36] bond0 (unregistering): Released all slaves [ 787.537011][T11182] cgroup: Unknown subsys name 'cpuset' [ 787.918665][T11043] Bluetooth: hci2: command tx timeout [ 787.992171][T11190] loop4: detected capacity change from 0 to 1024 [ 788.002173][T11190] ext4: Unknown parameter 'fscontext' [ 789.756064][ T36] hsr_slave_0: left promiscuous mode [ 789.770025][ T36] hsr_slave_1: left promiscuous mode [ 789.793401][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.827711][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.962711][T11043] Bluetooth: hci2: command tx timeout [ 790.595443][ T36] team0 (unregistering): Port device team_slave_1 removed [ 790.828223][T11201] siw: device registration error -23 [ 790.922112][ T36] team0 (unregistering): Port device team_slave_0 removed [ 792.345840][T11207] loop4: detected capacity change from 0 to 128 [ 792.398447][T11157] vhci_hcd: connection reset by peer [ 792.423210][ T2998] vhci_hcd: stop threads [ 792.427510][ T2998] vhci_hcd: release socket [ 792.432534][T11207] EXT4-fs (loop4): Test dummy encryption mode enabled [ 792.463000][ T2998] vhci_hcd: disconnect device [ 792.466636][T11207] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 792.518562][T11207] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 792.534023][ T5843] vhci_hcd: vhci_device speed not set [ 792.618190][T11207] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 792.843690][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 793.097378][T11095] chnl_net:caif_netlink_parms(): no params data found [ 793.898908][T11219] loop4: detected capacity change from 0 to 2048 [ 794.157823][T11215] loop5: detected capacity change from 0 to 2048 [ 794.258178][T11219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.371408][T11219] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.484196][T11219] fscrypt (loop4, inode 13): Error -61 getting encryption context [ 794.740703][T10976] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 794.754661][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.852090][T11236] loop2: detected capacity change from 0 to 1024 [ 794.880233][T11236] ext4: Unknown parameter 'fscontext' [ 796.413508][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.450029][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.472518][T11095] bridge_slave_0: entered allmulticast mode [ 796.481340][T11095] bridge_slave_0: entered promiscuous mode [ 796.557478][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.590152][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.620426][T11095] bridge_slave_1: entered allmulticast mode [ 796.648858][T11095] bridge_slave_1: entered promiscuous mode [ 796.690861][T10976] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 796.702575][ T30] audit: type=1326 audit(1756021202.446:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.4.1150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x0 [ 796.798013][T10976] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 796.946936][T10976] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 796.995938][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.240339][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.417625][T11252] loop5: detected capacity change from 0 to 2048 [ 797.593135][T11252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 797.690470][T11095] team0: Port device team_slave_0 added [ 797.716123][T11095] team0: Port device team_slave_1 added [ 797.922404][ T30] audit: type=1800 audit(1756021203.676:422): pid=11252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1152" name="file1" dev="loop5" ino=1415 res=0 errno=0 [ 798.011563][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.035697][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.132445][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.188617][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.222934][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.292575][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.412699][T11144] chnl_net:caif_netlink_parms(): no params data found [ 798.519697][T11275] siw: device registration error -23 [ 799.645197][T11283] loop2: detected capacity change from 0 to 1024 [ 801.645860][T11301] loop2: detected capacity change from 0 to 128 [ 802.189210][T11095] hsr_slave_0: entered promiscuous mode [ 802.273839][T11095] hsr_slave_1: entered promiscuous mode [ 802.298501][T11095] debugfs: 'hsr0' already exists in 'hsr' [ 802.306714][T11095] Cannot create hsr debugfs directory [ 803.200135][T11322] cramfs: Unknown parameter 'discard' [ 806.753758][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.791566][T11144] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.821974][T11144] bridge_slave_0: entered allmulticast mode [ 806.858616][T11144] bridge_slave_0: entered promiscuous mode [ 806.905835][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.946918][T11144] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.973434][T11144] bridge_slave_1: entered allmulticast mode [ 807.003371][T11144] bridge_slave_1: entered promiscuous mode [ 807.071042][T10976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.836214][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 807.879398][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 807.905180][T11144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.908647][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 807.968357][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 807.984117][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 808.022458][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 808.029917][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 808.041373][T11144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.093686][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 808.122617][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 808.148084][ T5968] hid-generic 0008:0008:8001.0010: unknown main item tag 0x0 [ 808.193339][ T5968] hid-generic 0008:0008:8001.0010: hidraw0: HID v10.00 Device [syz0] on syz1 [ 808.298561][T10976] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.521406][T11353] fido_id[11353]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 808.904283][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 809.262330][ T8529] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 809.337133][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 809.348780][T11144] team0: Port device team_slave_0 added [ 809.456302][ T8529] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 809.489275][ T8529] usb 3-1: config 0 has no interface number 0 [ 809.510015][ T8529] usb 3-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=fd.4b [ 809.529550][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.536683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.549570][ T8529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.590027][ T8529] usb 3-1: config 0 descriptor?? [ 809.656655][T11144] team0: Port device team_slave_1 added [ 809.672466][T11368] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1175'. [ 809.799934][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.807125][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.083935][T11144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.119878][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.200924][T11144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.255682][T11144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.272307][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.326030][T11378] loop4: detected capacity change from 0 to 512 [ 811.363145][T11144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.386049][T11378] EXT4-fs (loop4): Test dummy encryption mode enabled [ 811.406017][T11378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 811.450286][T11378] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1179: bad orphan inode 131083 [ 811.491969][T10807] bridge_slave_1: left allmulticast mode [ 811.510548][T10807] bridge_slave_1: left promiscuous mode [ 811.518798][T11378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.675893][ T5941] usb 3-1: USB disconnect, device number 12 [ 811.697726][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.745147][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.015428][T10807] bridge_slave_0: left allmulticast mode [ 812.021138][T10807] bridge_slave_0: left promiscuous mode [ 812.175534][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.844452][T10807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.877137][T10807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.911545][T10807] bond0 (unregistering): Released all slaves [ 816.291341][T11395] loop2: detected capacity change from 0 to 128 [ 816.301439][T11395] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 816.382297][T11395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 817.049941][T10807] hsr_slave_0: left promiscuous mode [ 817.084173][T10807] hsr_slave_1: left promiscuous mode [ 817.090411][T10807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.206895][T10807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.400937][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 817.417571][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 817.434549][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 817.472973][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 817.489354][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 818.301247][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.307781][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.323133][T10807] team0 (unregistering): Port device team_slave_1 removed [ 819.333443][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 819.346237][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 819.365286][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 819.374387][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 819.382509][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 819.546811][T10807] team0 (unregistering): Port device team_slave_0 removed [ 819.563554][T11043] Bluetooth: hci6: command tx timeout [ 819.748295][T11434] loop4: detected capacity change from 0 to 1024 [ 819.807549][T11434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.859337][ T30] audit: type=1326 audit(1756021225.616:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x7ffc0000 [ 819.907868][ T30] audit: type=1326 audit(1756021225.616:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x7ffc0000 [ 819.931815][ T30] audit: type=1326 audit(1756021225.616:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f44b4f8ebe9 code=0x7ffc0000 [ 819.955507][ T30] audit: type=1326 audit(1756021225.616:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8ebe9 code=0x7ffc0000 [ 819.979794][ T30] audit: type=1326 audit(1756021225.616:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f44b4f8ebe9 code=0x7ffc0000 [ 820.011994][ T30] audit: type=1326 audit(1756021225.636:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b4f2ade9 code=0x7ffc0000 [ 820.052720][ T30] audit: type=1326 audit(1756021225.646:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b4f2ade9 code=0x7ffc0000 [ 820.075737][ T30] audit: type=1326 audit(1756021225.646:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b4f2ade9 code=0x7ffc0000 [ 820.098684][ T30] audit: type=1326 audit(1756021225.646:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b4f2ade9 code=0x7ffc0000 [ 820.128936][ T30] audit: type=1326 audit(1756021225.646:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b4f2ade9 code=0x7ffc0000 [ 820.603137][T11144] hsr_slave_0: entered promiscuous mode [ 820.609971][T11144] hsr_slave_1: entered promiscuous mode [ 820.624526][T11144] debugfs: 'hsr0' already exists in 'hsr' [ 820.630285][T11144] Cannot create hsr debugfs directory [ 822.013018][T11043] Bluetooth: hci1: command tx timeout [ 822.386199][T11043] Bluetooth: hci6: command tx timeout [ 823.221692][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.727141][T11095] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 823.772729][ T5941] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 823.782909][T11095] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 823.964643][ T5941] usb 5-1: config index 0 descriptor too short (expected 5668, got 36) [ 823.965273][T11095] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 823.992275][ T5941] usb 5-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 824.021280][ T5941] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 824.023310][T11095] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 824.072546][ T5941] usb 5-1: config 3 has no interface number 0 [ 824.078734][ T5941] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 824.142413][ T5941] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.176517][ T5941] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 824.187792][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.214578][ T5941] usb 5-1: Product: syz [ 824.218798][ T5941] usb 5-1: Manufacturer: syz [ 824.232694][ T5941] usb 5-1: SerialNumber: syz [ 824.276619][T11448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.443473][ T5882] Bluetooth: hci6: command tx timeout [ 824.448990][ T5882] Bluetooth: hci1: command tx timeout [ 824.546279][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.623293][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.663812][ T5941] usb-storage 5-1:3.20: USB Mass Storage device detected [ 824.701584][ T5941] usb-storage 5-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 824.722418][ T5941] scsi host1: usb-storage 5-1:3.20 [ 824.762661][ T5941] usb 5-1: USB disconnect, device number 29 [ 825.772354][T11476] loop2: detected capacity change from 0 to 128 [ 825.792489][T11476] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 825.804978][T11405] chnl_net:caif_netlink_parms(): no params data found [ 825.817529][T11476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.597113][ T5882] Bluetooth: hci1: command tx timeout [ 826.597143][T11043] Bluetooth: hci6: command tx timeout [ 827.348659][T11483] loop2: detected capacity change from 0 to 512 [ 827.438195][T11483] EXT4-fs: Ignoring removed oldalloc option [ 827.469164][T11429] chnl_net:caif_netlink_parms(): no params data found [ 827.516292][T11483] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 827.563895][T11483] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 827.604965][T11483] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 827.680722][T11483] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c02c, mo2=0102] [ 827.695327][T11483] System zones: 0-2, 18-18, 34-34 [ 827.722797][T11483] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1199: iget: bad i_size value: 360287970189639680 [ 827.749712][T11483] EXT4-fs (loop2): Remounting filesystem read-only [ 827.764653][T11483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.847833][T11491] loop4: detected capacity change from 0 to 164 [ 828.064885][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.154987][T11498] loop2: detected capacity change from 0 to 256 [ 828.166971][T11498] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 828.198761][T11498] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 828.242681][T11498] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 828.683008][T11043] Bluetooth: hci1: command tx timeout [ 829.080034][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.100548][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.110053][ T30] kauditd_printk_skb: 1478 callbacks suppressed [ 829.110078][ T30] audit: type=1326 audit(1756021234.866:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.148843][T11429] bridge_slave_0: entered allmulticast mode [ 829.165812][T11429] bridge_slave_0: entered promiscuous mode [ 829.185049][ T30] audit: type=1326 audit(1756021234.896:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.221655][ T30] audit: type=1326 audit(1756021234.896:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.263859][ T30] audit: type=1326 audit(1756021234.896:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.271839][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.287961][ T30] audit: type=1326 audit(1756021234.896:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.358102][T11405] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.369350][ T30] audit: type=1326 audit(1756021234.906:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.373196][T11405] bridge_slave_0: entered allmulticast mode [ 829.432327][ T30] audit: type=1326 audit(1756021234.906:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.450179][T11405] bridge_slave_0: entered promiscuous mode [ 829.487139][T11405] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.498772][T11405] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.506895][T11405] bridge_slave_1: entered allmulticast mode [ 829.516129][T11405] bridge_slave_1: entered promiscuous mode [ 829.524122][ T30] audit: type=1326 audit(1756021234.906:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.550844][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.558085][ T30] audit: type=1326 audit(1756021234.906:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.580878][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.588721][T11429] bridge_slave_1: entered allmulticast mode [ 829.597512][T11429] bridge_slave_1: entered promiscuous mode [ 829.604191][ T30] audit: type=1326 audit(1756021234.906:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe90398ebe9 code=0x7ffc0000 [ 829.689231][T11144] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 829.780673][T11144] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 829.827492][T11429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.868603][T11144] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 829.892803][T11144] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 829.920155][T11405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.944835][T11429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.980376][T11405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.121311][T11429] team0: Port device team_slave_0 added [ 830.160371][T11405] team0: Port device team_slave_0 added [ 830.191595][T11429] team0: Port device team_slave_1 added [ 830.201269][T11405] team0: Port device team_slave_1 added [ 830.208531][T10807] bridge_slave_1: left allmulticast mode [ 830.217528][T10807] bridge_slave_1: left promiscuous mode [ 830.224314][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.236651][T10807] bridge_slave_0: left allmulticast mode [ 830.242910][T10807] bridge_slave_0: left promiscuous mode [ 830.248692][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.575950][T11521] loop2: detected capacity change from 0 to 128 [ 830.588737][T11521] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 830.678327][T11521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 832.068000][T10807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.093009][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 832.113178][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 832.123296][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 832.134935][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 832.146833][T10807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.155792][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 832.194505][T10807] bond0 (unregistering): Released all slaves [ 832.559463][T11429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.569095][T11531] loop7: detected capacity change from 0 to 7 [ 832.578144][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.597283][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.613882][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 832.631615][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.640822][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 832.649774][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.658960][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 832.671673][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.680876][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 832.691983][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.701240][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 832.708463][T11429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.812354][T11533] [ 832.814711][T11533] ====================================================== [ 832.821716][T11533] WARNING: possible circular locking dependency detected [ 832.828715][T11533] syzkaller #0 Not tainted [ 832.833119][T11533] ------------------------------------------------------ [ 832.840133][T11533] syz.4.1210/11533 is trying to acquire lock: [ 832.846196][T11533] ffff88801c6f7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 832.856398][T11533] [ 832.856398][T11533] but task is already holding lock: [ 832.863741][T11533] ffff888025c6a7e8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 832.875029][T11533] [ 832.875029][T11533] which lock already depends on the new lock. [ 832.875029][T11533] [ 832.886654][T11533] [ 832.886654][T11533] the existing dependency chain (in reverse order) is: [ 832.895657][T11533] [ 832.895657][T11533] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 832.904291][T11533] blk_alloc_queue+0x619/0x760 [ 832.909587][T11533] blk_mq_alloc_queue+0x172/0x280 [ 832.915148][T11533] __blk_mq_alloc_disk+0x29/0x120 [ 832.920712][T11533] loop_add+0x490/0xb70 [ 832.925394][T11533] loop_init+0x164/0x270 [ 832.930168][T11533] do_one_initcall+0x123/0x6e0 [ 832.935551][T11533] kernel_init_freeable+0x5c2/0x910 [ 832.941279][T11533] kernel_init+0x1c/0x2b0 [ 832.946129][T11533] ret_from_fork+0x5d7/0x6f0 [ 832.951241][T11533] ret_from_fork_asm+0x1a/0x30 [ 832.956538][T11533] [ 832.956538][T11533] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 832.963766][T11533] fs_reclaim_acquire+0x102/0x150 [ 832.969320][T11533] kmem_cache_alloc_noprof+0x53/0x3b0 [ 832.975237][T11533] __kernfs_iattrs+0x124/0x3e0 [ 832.980526][T11533] __kernfs_setattr+0x4d/0x3c0 [ 832.985816][T11533] kernfs_iop_setattr+0xda/0x120 [ 832.991281][T11533] notify_change+0x6a9/0x1230 [ 832.996502][T11533] do_truncate+0x1d7/0x230 [ 833.001484][T11533] path_openat+0x2678/0x2cb0 [ 833.006618][T11533] do_filp_open+0x20b/0x470 [ 833.011912][T11533] do_sys_openat2+0x11b/0x1d0 [ 833.017157][T11533] __x64_sys_openat+0x174/0x210 [ 833.022553][T11533] do_syscall_64+0xcd/0x4c0 [ 833.027600][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.034024][T11533] [ 833.034024][T11533] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 833.042563][T11533] __lock_acquire+0x12a6/0x1ce0 [ 833.047962][T11533] lock_acquire+0x179/0x350 [ 833.053013][T11533] down_read+0x9b/0x480 [ 833.057714][T11533] kernfs_iop_getattr+0x9c/0xf0 [ 833.063135][T11533] vfs_getattr_nosec+0x2ac/0x430 [ 833.068607][T11533] vfs_getattr+0x4a/0x60 [ 833.073376][T11533] loop_query_min_dio_size.isra.0+0x117/0x250 [ 833.079973][T11533] lo_ioctl+0x144b/0x1cc0 [ 833.084863][T11533] blkdev_ioctl+0x277/0x6d0 [ 833.089899][T11533] __x64_sys_ioctl+0x18e/0x210 [ 833.095232][T11533] do_syscall_64+0xcd/0x4c0 [ 833.100280][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.106704][T11533] [ 833.106704][T11533] other info that might help us debug this: [ 833.106704][T11533] [ 833.116921][T11533] Chain exists of: [ 833.116921][T11533] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 833.116921][T11533] [ 833.131396][T11533] Possible unsafe locking scenario: [ 833.131396][T11533] [ 833.138842][T11533] CPU0 CPU1 [ 833.144201][T11533] ---- ---- [ 833.149556][T11533] lock(&q->q_usage_counter(io)#24); [ 833.154944][T11533] lock(fs_reclaim); [ 833.161451][T11533] lock(&q->q_usage_counter(io)#24); [ 833.169359][T11533] rlock(&root->kernfs_iattr_rwsem); [ 833.174734][T11533] [ 833.174734][T11533] *** DEADLOCK *** [ 833.174734][T11533] [ 833.182868][T11533] 3 locks held by syz.4.1210/11533: [ 833.188056][T11533] #0: ffff888143f2b400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 833.198309][T11533] #1: ffff888025c6a7e8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 833.210036][T11533] #2: ffff888025c6a820 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 833.221969][T11533] [ 833.221969][T11533] stack backtrace: [ 833.227853][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.4.1210 Not tainted syzkaller #0 PREEMPT(full) [ 833.227895][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 833.227916][T11533] Call Trace: [ 833.227929][T11533] [ 833.227941][T11533] dump_stack_lvl+0x116/0x1f0 [ 833.227993][T11533] print_circular_bug+0x275/0x350 [ 833.228050][T11533] check_noncircular+0x14c/0x170 [ 833.228110][T11533] __lock_acquire+0x12a6/0x1ce0 [ 833.228174][T11533] lock_acquire+0x179/0x350 [ 833.228229][T11533] ? kernfs_iop_getattr+0x9c/0xf0 [ 833.228268][T11533] ? __pfx___might_resched+0x10/0x10 [ 833.228320][T11533] down_read+0x9b/0x480 [ 833.228372][T11533] ? kernfs_iop_getattr+0x9c/0xf0 [ 833.228408][T11533] ? find_held_lock+0x2b/0x80 [ 833.228449][T11533] ? __pfx_down_read+0x10/0x10 [ 833.228501][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.228550][T11533] kernfs_iop_getattr+0x9c/0xf0 [ 833.228589][T11533] vfs_getattr_nosec+0x2ac/0x430 [ 833.228633][T11533] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 833.228673][T11533] vfs_getattr+0x4a/0x60 [ 833.228712][T11533] loop_query_min_dio_size.isra.0+0x117/0x250 [ 833.228753][T11533] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 833.228791][T11533] ? mark_held_locks+0x49/0x80 [ 833.228860][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.228901][T11533] ? blk_freeze_queue_start+0xec/0x140 [ 833.228942][T11533] lo_ioctl+0x144b/0x1cc0 [ 833.228983][T11533] ? __pfx_lo_ioctl+0x10/0x10 [ 833.229020][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229063][T11533] ? kasan_quarantine_put+0x10a/0x240 [ 833.229114][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229156][T11533] ? lockdep_hardirqs_on+0x7c/0x110 [ 833.229201][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229245][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229286][T11533] ? blk_get_meta_cap+0x482/0x700 [ 833.229331][T11533] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 833.229376][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229417][T11533] ? blkdev_common_ioctl+0x1d6/0x2470 [ 833.229454][T11533] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 833.229497][T11533] ? __handle_mm_fault+0x5a8/0x2a50 [ 833.229546][T11533] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 833.229587][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229629][T11533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 833.229669][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229710][T11533] ? do_vfs_ioctl+0x128/0x14f0 [ 833.229756][T11533] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 833.229809][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229850][T11533] ? find_held_lock+0x2b/0x80 [ 833.229890][T11533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.229934][T11533] ? __pfx_lo_ioctl+0x10/0x10 [ 833.229971][T11533] blkdev_ioctl+0x277/0x6d0 [ 833.230008][T11533] ? __pfx_blkdev_ioctl+0x10/0x10 [ 833.230048][T11533] ? __pfx_blkdev_ioctl+0x10/0x10 [ 833.230086][T11533] __x64_sys_ioctl+0x18e/0x210 [ 833.230134][T11533] do_syscall_64+0xcd/0x4c0 [ 833.230185][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.230219][T11533] RIP: 0033:0x7f44b4f8ebe9 [ 833.230246][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.230279][T11533] RSP: 002b:00007f44b5d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.230310][T11533] RAX: ffffffffffffffda RBX: 00007f44b51b6090 RCX: 00007f44b4f8ebe9 [ 833.230337][T11533] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 833.230358][T11533] RBP: 00007f44b5011e19 R08: 0000000000000000 R09: 0000000000000000 [ 833.230380][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.230401][T11533] R13: 00007f44b51b6128 R14: 00007f44b51b6090 R15: 00007fff00366808 [ 833.230435][T11533] [ 833.232820][T11429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.325929][T11524] usb usb8: usbfs: process 11524 (syz.2.1207) did not claim interface 0 before use [ 833.344633][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.358402][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.363661][T11429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.367742][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 833.705319][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.714532][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 833.725087][T10533] ldm_validate_partition_table(): Disk read failed. [ 833.734676][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.743860][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 833.775425][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.784743][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 833.844432][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.853723][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 833.873380][T10533] Dev loop7: unable to read RDB block 0 [ 833.884606][T10533] loop7: unable to read partition table [ 833.904485][T10533] loop7: partition table beyond EOD, truncated [ 834.005871][T10807] hsr_slave_0: left promiscuous mode [ 834.165897][T10807] hsr_slave_1: left promiscuous mode [ 834.171847][T10807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.202611][ T5882] Bluetooth: hci4: command tx timeout [ 834.227810][T10807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.451859][T10807] team0 (unregistering): Port device team_slave_1 removed [ 834.493622][T10807] team0 (unregistering): Port device team_slave_0 removed [ 835.436664][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.498292][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.549043][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.588622][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.700131][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.765430][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.824688][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.879268][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.238769][ T12] bridge_slave_1: left allmulticast mode [ 836.248323][ T12] bridge_slave_1: left promiscuous mode [ 836.256730][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.267957][ T12] bridge_slave_0: left allmulticast mode [ 836.273876][ T12] bridge_slave_0: left promiscuous mode [ 836.279589][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.296097][ T12] bridge_slave_1: left allmulticast mode [ 836.301761][ T12] bridge_slave_1: left promiscuous mode [ 836.309507][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.319021][ T12] bridge_slave_0: left allmulticast mode [ 836.327405][ T12] bridge_slave_0: left promiscuous mode [ 836.334177][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.346985][ T12] bridge_slave_1: left allmulticast mode [ 836.353534][ T12] bridge_slave_1: left promiscuous mode [ 836.359257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.376199][ T12] bridge_slave_0: left allmulticast mode [ 836.381866][ T12] bridge_slave_0: left promiscuous mode [ 836.388121][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.407147][ T12] bridge_slave_0: left allmulticast mode [ 836.413040][ T12] bridge_slave_0: left promiscuous mode [ 836.418744][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.436820][ T12] bridge_slave_1: left allmulticast mode [ 836.442668][ T12] bridge_slave_1: left promiscuous mode [ 836.448400][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.465432][ T12] bridge_slave_0: left allmulticast mode [ 836.471116][ T12] bridge_slave_0: left promiscuous mode [ 836.477198][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.618754][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.629821][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.641635][ T12] bond0 (unregistering): Released all slaves [ 836.720291][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.730357][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.740678][ T12] bond0 (unregistering): Released all slaves [ 836.948763][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.959557][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.969945][ T12] bond0 (unregistering): Released all slaves [ 837.368120][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.378154][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.388280][ T12] bond0 (unregistering): Released all slaves [ 837.468180][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.478703][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.489387][ T12] bond0 (unregistering): Released all slaves [ 837.910821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.920109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.937396][ T12] hsr_slave_0: left promiscuous mode [ 837.946302][ T12] hsr_slave_1: left promiscuous mode [ 837.952132][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.967904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.976973][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.988013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.999353][ T12] hsr_slave_0: left promiscuous mode [ 838.013224][ T12] hsr_slave_1: left promiscuous mode [ 838.018991][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.028054][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.035908][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.043375][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.054744][ T12] hsr_slave_0: left promiscuous mode [ 838.060484][ T12] hsr_slave_1: left promiscuous mode [ 838.066347][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.073971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.089546][ T12] veth1_macvtap: left promiscuous mode [ 838.095379][ T12] veth0_macvtap: left promiscuous mode [ 838.100962][ T12] veth1_vlan: left promiscuous mode [ 838.106560][ T12] veth0_vlan: left promiscuous mode [ 838.113363][ T12] veth1_macvtap: left promiscuous mode [ 838.118869][ T12] veth0_macvtap: left promiscuous mode [ 838.124731][ T12] veth1_vlan: left promiscuous mode [ 838.130003][ T12] veth0_vlan: left promiscuous mode [ 838.250184][ T12] team0 (unregistering): Port device team_slave_1 removed [ 838.266689][ T12] team0 (unregistering): Port device team_slave_0 removed [ 838.376579][ T12] team0 (unregistering): Port device team_slave_1 removed [ 838.388197][ T12] team0 (unregistering): Port device team_slave_0 removed [ 838.570920][ T12] team0 (unregistering): Port device team_slave_1 removed [ 838.596119][ T12] team0 (unregistering): Port device team_slave_0 removed [ 838.780141][ T12] team0 (unregistering): Port device team_slave_1 removed [ 838.802121][ T12] team0 (unregistering): Port device team_slave_0 removed [ 838.991768][ T12] team0 (unregistering): Port device team_slave_1 removed [ 839.015747][ T12] team0 (unregistering): Port device team_slave_0 removed [ 839.091915][ T5968] infiniband syz1: ib_query_port failed (-19) [ 840.323237][ T12] bridge_slave_1: left allmulticast mode [ 840.328950][ T12] bridge_slave_1: left promiscuous mode [ 840.335259][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.343489][ T12] bridge_slave_0: left allmulticast mode [ 840.349122][ T12] bridge_slave_0: left promiscuous mode [ 840.355139][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.465480][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.476207][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.485796][ T12] bond0 (unregistering): Released all slaves [ 840.617755][ T12] hsr_slave_0: left promiscuous mode [ 840.627095][ T12] hsr_slave_1: left promiscuous mode [ 840.633236][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.640867][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.734797][ T12] team0 (unregistering): Port device team_slave_1 removed [ 840.750529][ T12] team0 (unregistering): Port device team_slave_0 removed