last executing test programs: 29.830709444s ago: executing program 4 (id=1221): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000240)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@init_itable_val}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$eJzs3c1vVFUbAPDnTD8olPdtIUbFhTQxBhKlpQUMMS5gTxr8iBs3VloIUqChNVo0sSS4MTFujDFx5UL8L5TIlpWuXLhxZUiIGpYmjrkzc0tb7rS0THsr9/dLht57zlzOczt9eu6cnnMngMoayv6pReyLiJkUMZAWFuu6o1U51Hzevb8+OpM9UtTrr/+RIrXK8uen1tf+1sF9EfHTjyn2dj3Y7uz81QsT09NTV1r7I3MXZ0Zm568eOn9x4tzUualLYy+NHT929Njx0cMdO9dT1999f+DT8be+/frvNPrdr+MpTsTuVt3S8+iUoRhqfk92LC/Pvq/HO91YSbpa57P0JU7dJQbEuuSvX09EPBUD0RX3X7yB+OTVUoMDNlU9RdSBikryHyoqvw7I39uvfB9cK+WqBNgKd082BwAezP/u5thg9DXGBnbdS7F0WCdFRCdG5rI2bt8av3721vj12KRxOKDYwrWIeLoo/1MjNwcbo/hZ/teW5X92XXC69TUrf22D7Q+t2Jf/sHWa+d+3ofx/e0n+v7PB9uU/AAAAAAAAdM7NkxHxYtHf/2uL83+iYP5Pf0Sc6ED7a//9r3anA80ABe6ejHilcP5vLZ/9O9jV2vpfYz5ATzp7fnrqcET8PyIORs+ObH90lTYOfbb3q3Z1+fy//JG1f7s1F7AVx53uFetnJyfmJh71vIGIu9cinimc/5sW+/9U0P9nvw9mHrKNvc/fON2ubu38BzZL/ZuIA4X9f1p8Tlr9/hwjjeuBkfyq4EHPfvj59+3al/9Qnqz/37V6/g+mpffrmV1/G0fmu+vt6jZ6/d+b3mjccqa3VfbBxNzcldGI3nSqKytdVj62/pjhcZTnQ54vWf4ffG718b+i6/+dEbGw4v9Ofy5fU5x78p/+39rFo/+H8mT5P7mu/n/9G2M3Bn9o1/7D9f9HG339wVaJ8T9o+jJP097l5QXp2F1UtdXxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjoBYRuyPVhhe3a7Xh4Yj+iHgidtWmL8/OvXD28nuXJrO6xuf/1/JP+h1o7qf88/8Hl+yPrdg/EhF7IuKLrp2N/eEzl6cnyz55AAAAAAAAAAAAAAAAAAAA2Cb626z/z/zeVXZ0wKbrLjsAoDQF+f9zGXEAW0//D9Ul/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7Nl/85cUEQsv72w8Mr2tup5SIwM2W63sAIDSuMUPVJepP1Bd3uMDaY36vrYHrXXkambOPMLBAAAAAAAAAAAAAFA5B/ZZ/w9VZf0/VJf1/1Bd+fr//SXHAWw97/GBWGMlf+H6/zWPAgAAAAAAAAAAAAA6aXb+6oWJ6empKzbe3B5hbOVGvV7/OPsp2C7x/Mc38qnw2yWeR9oo9/cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw378BAAD//2QiJqY=") quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0xfea7) copy_file_range(r0, 0x0, r1, &(0x7f0000000640)=0xe000, 0xd8c2, 0x0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x298) chdir(0x0) creat(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) 28.735943716s ago: executing program 4 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x0) 28.56407615s ago: executing program 4 (id=1226): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6, 0x1, [0x3ff]}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x7c, "f1d92d5ea58c1d5bde00a5f4c645ce50733d606fecb34fc041269e181f730523e7004177698c25b203b1a26748bdb6a7bdbc417027cb51a32a5de44fe7786b8451e95679cf698de191f521bac98dc091fb4183d675c8fe6c75c089a487e97a91bbf9503855e1920f1f8a180cd55ce2a6bf053eba3bad2f06bcad1f75"}, &(0x7f0000000200)=0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000140)={0x0, 0x0, 0x3}) r5 = socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x54, r9, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x94, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xffffff65}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x22000844) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@private2, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x13}}, 0x80, 0x0, 0x0, 0x100, 0x0, 0x810026, r10}) 28.367590247s ago: executing program 4 (id=1228): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup(0xffffffffffffffff) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 26.705165865s ago: executing program 4 (id=1234): socket(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1054083, &(0x7f0000000700)={[{@nodelalloc}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noblock_validity}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@resuid}, {@journal_async_commit}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x42a, "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"}, &(0x7f0000001040)=0x44e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x4, 0x65a) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x60400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000004a4107b2775270fd1409000000000200000000000c0002800500010cfbeab374dbc8715388e8000280050001000000000014000180080001007f00000108000200ac14140008000740fffffffe3e63"], 0x64}}, 0x0) 24.070537066s ago: executing program 4 (id=1248): syz_mount_image$msdos(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000b00)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4fb, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x180) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 9.4253951s ago: executing program 0 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r6}, 0x8) bpf$LINK_DETACH(0xf, &(0x7f0000000080)=r6, 0x4) 9.418427361s ago: executing program 2 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000251000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x5, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000879000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x10000291, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 9.417720691s ago: executing program 3 (id=1291): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6e6, &(0x7f0000000f40)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054aUkquOgUIuOemmMrMz+9Cudle2LG3T30/MzjfzPeab/7x2dhATwP+t1fkoP4kkVuff3Emn9/eWmlN7SzN5djMiKhFRiii3RpFsRJZ7Kx/im+nMvHzSbvhfvcv5cH3l7c+/2v+iNVXOh6x80lNvtEr/rN18iHpETOXjftPHtPjJ0cX3tHf72PbG1VnDNGDXisDFn56pVXhmh31223kf/zv7HFb9JMctMKGS1nWzz1zEbERUI1pX/fzsUDrb3p2+3fPuAAAAAJxU7eRVXjiIg9iJC8+jOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB1lb//P8mHUpGuR1K8/7+Sz4s8PYFGvwjxs5nW+Mnz7wwAAAAAAAAAPHevHsRB7MSFYvowyZ75v9b1jP8b8V5sxVpsxvXYiUZsx3ZsxmJEzHU1VNlpbG9vLmY1Iy4NqXkzPh1Q8+bxfbx1yusMAAAAAAAAABOuOiL//nT/vN/Gauf5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIIkYqo1yoZLRXouSuWIqBbldiM+jYjK+fb2RJJBM5+cfT8AAADgmVR7J5PqGHVeeD8OYicuFNOHSXbPfyW7X67Ge7ER27Ee29GMtbiT30Ond/2l/b2l5v7e0oN06G/3x1+eqOtZi9H67WHwkl/OStTibqxnc67H7UjiMFPKW3l5f28pHT8Y3K8P0j4lP8oN6c1UV/pO+nH1kyz9x95fEconWsWnVDo2Zy7LnW5HZCHvW1rjYhGBwZHo2TqDdpPy0CUtRqn9y8+l4UsaHPMPhq/z7JFSA3+5ORdHI3EzSu0tdGV4JCK+/bePf3mvuXH/3t2t+clZpYHeH1niaCSWuiJx9WsUidEWskhcbk+vxs/iFzEfX868FZuxHr+KRmzHWr3Ib+T7c/o5NzxSn812T701qifpMVlvn78G9akePX2Kevw0SzXitWybXoj1SOJhRKzFG9nfzVhsnw06W/jyGEd9aYwzbZdr38lG7TBF7fiyfxmvydOSxvViV1y7z7lzWV73nE6UXhwYpeJaN/71qEv5W3kibeF3Q68PZ+1oJBa7IvHScftLK6R/zq4mW82N+5v3Gu+OubzX83F6HP1hoq4S6dq8GNV85S5mn0l2TC1keS+1r7C98arkT1xaSn15l9v1Wkfqz+Nh3Ok5Ur8fy7EcK1npK1np6b4rVpp3td1S7zk8zUu/aZXbD3a6v289jGbr+xAAk232u7OV2n9q/6x9VPt97V7tzepPZn4w80olpv8x/cPywtTrpVeSv8ZH8ZvO/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD0th49vt9oNtc2BydKg7OS4bUazcPiRWJDyvQkkvxVOWMUTrYePT4c2eDwxEzevaesfpqJ4jV8owvXh7ZTfqZuJLtHt1d19LYo3vI0xiKSvoCnlZ86dMWSO3OmJ2BTHk3UT6/BYoftyjr53lsbtL2mImJQ4REnjqnTOPsA5+nG9oN3b2w9evy99QeNd9beWduYXl5eWVhZfmPpxt315tpC67Orwpm8/BY4C91fJ9oqEfHq6LpDXtQKAAAAAAAAAAAAPEdn8b8Q572OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+21fkoP4kkFheuL6TT+3tLzXQo0p2S5YgoRUTy64jk7xG3ojXEXFdzyXHL+XB95e3Pv9r/otNWuShfitg9tt54dvMh6hExlY9Pq73bo9urdJIzA7KTdmTSgF0rAgfn7b8BAAD//0+S7AE=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_read_part_table(0x1083, &(0x7f00000010c0)="$eJzs0L1NQzEUBeDj9/J+MgVhkxR0dNDDGnQJPVswACtQMwENU1BQgGRkXsgGkOb7Clu+ukc6cjipVTfPm+Nrn3RJ5uTxaVxG9+l/7nWS86SUZfzcjt0hNtVa324yJBmPG02fjyTb5HadVep7Sr7qkN3cvUzJfuzL1cX1ZavxmxhyiHeftdZtyyYld8nUljZ1MbWSZ68Pf/09AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAvvgMAAP//V2IeuA==") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1008008, &(0x7f0000000100)={[{@fat=@errors_continue}, {@fat=@errors_remount}, {@nodots}, {@dots}, {@fat=@usefree}, {@fat=@errors_continue}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@errors_continue}, {@dots}, {@dots}]}, 0x1, 0x1ee, &(0x7f0000000700)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x44ac2, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x2818c02, &(0x7f0000002580)=ANY=[], 0x1, 0xc3b, &(0x7f0000001940)="$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") r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fchmod(r1, 0x1c8) fcntl$setownex(r2, 0xf, &(0x7f0000002640)={0x3}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(0x0, 0x0, 0x0) copy_file_range(r3, 0x0, r1, &(0x7f00000000c0)=0x10000, 0x6, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xf000}], 0x2, 0x7800, 0x0, 0x3) write$cgroup_type(r0, &(0x7f0000000000), 0x6e000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001380), 0x301000, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) fcntl$setflags(r5, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 9.208759009s ago: executing program 1 (id=1292): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc0386105, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f00000001c0)=[{0x6}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) creat(0x0, 0x0) fchdir(r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) setresuid(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 7.598790643s ago: executing program 0 (id=1293): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfea115a26973a207abc5f5e3845bbdc041775155e17070eea2ad4bc9f3c0447194395924f91ba236a188d6a107541de01fe4e626dbf88b57c76945c713c2e274853b3dee5b3cf8de2a9bde26310eff592d4f9"], 0x1, 0x171, &(0x7f00000001c0)="$eJzs289KMlEYx/Hn+P/1LYisFtEiCKJNjhpY7ewCugjRSaSxJNsoQXQpXUaX0iUEtWjXKmMGZ8KjIQnOaZzvZ+Pz+PPgmcUZHwUFQGzVZFeUKMm4zU5u7b6gTG8JQEiGo8fPIYD4SX78doF72wAQfW9nIl0ReX2/a0gyMzEfuHnNzxPZyfxBZDs1ylVO/unzxaPIvr9e5aeuzwf5/6n5wZ7//iuymvKTdSmM8mawfmvGtHM+IwcAIB6UFPV+7ImEXLQduxT0aa8vB33G6ytafxT0Wa8vNq6dpqQXdREA5pIYO//PL0/aIU1q5z+lnX8A0dXrDy7rjmPf/Fy4X/pnvYbCWKH+xjYolqwwfWcCsGjWbadr9fqDw3an3rJb9lW1Uq2elk6Oy5Y3+Fvj479L/4kfQER9f+ib3gkAAAAAAAAAAAAAAJjXhmya3gIAAACAkITxdyLT1wgAAAAAAAAAAAAAAAAAwLL5CgAA//+aZx0+") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 7.597990053s ago: executing program 1 (id=1294): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x2, 0x1, 0x801}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0xc7) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x4e, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x9acb5bdf919eea47}, 0x2000c800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000000206030000000000000000000003000000050005000a00000064000780080006400000000808001340ff000000000005404e20000008001740000000041800018014000240ff020000000027b04011f5000007080012400000009a08000b4000000007050007000400000008001240000000030500040003000000820da3c6e1538297720e2dd48e773b3636d6d6952fffb13c781517a6f3b1617f6490c654cfe0d26df1434db19148fa4e8dc3cfdcd42909567c643b64fc919fec982febea27c2dbd47596d702445e6d8d38b542acb6a6a59ed5e025461c4c438c12a30b75c8c7571a0a97f52692ea39e176b800"/251], 0x90}, 0x1, 0x0, 0x0, 0x42}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000780)=ANY=[@ANYBLOB='-pids'], 0x6) 7.597601913s ago: executing program 2 (id=1295): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl$BLKROSET(r4, 0x40101287, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x70, 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a320000000005000400000000000500010006000000140007800800064000000000080013400000000005"], 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$sg(&(0x7f0000002d00), 0x18, 0x103802) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 7.596199213s ago: executing program 3 (id=1296): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x72) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x3c0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x10, 0x2004, @fd=r5, 0x7, &(0x7f0000000440), 0x0, 0x2, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.805406993s ago: executing program 0 (id=1297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x0, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff002, 0x7ffffffff002, 0x0, &(0x7f0000000000/0x4000)=nil) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc000, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 5.792415884s ago: executing program 1 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800c80, &(0x7f0000000200)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@usrquota}, {@resuid}, {@discard}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9b}}, {@nodiscard}]}, 0x0, 0x466, &(0x7f0000000400)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffff1b, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) 5.792080924s ago: executing program 2 (id=1299): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0x1003, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3}}, './bus\x00'}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/24, 0x2000, 0x0, 0x6, 0x3}, 0x1c) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x10000, 0x10100}, &(0x7f0000000100)=0x0, 0x0) r10 = syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0xa3d, 0x0, 0x0, 0x0, 0xff39) syz_io_uring_submit(r9, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c00048038800c0001006269747769736500280002800800034000000004080480040001000800024000000016040005800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000000000"], 0x90}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5.791894475s ago: executing program 3 (id=1300): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000002a80)={0x6, {{0xa, 0x4e22, 0x100, @private1, 0x9}}, {{0xa, 0x4e23, 0x4, @mcast1, 0x6}}}, 0x108) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c000280080001c0000000020c00018008000140ac1414bb05000500020000000500010006"], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}]}}}]}, 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r5 = syz_io_uring_setup(0x40000238, &(0x7f0000000340)={0x0, 0x37b0, 0x40, 0x1, 0x1001b7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000002ec0)=""/4096, 0x1000) 3.978575366s ago: executing program 0 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="270300"/14, @ANYRES32=r3], 0x1c}}, 0x0) 3.969737187s ago: executing program 1 (id=1302): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x20c040) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@deltaction={0x58, 0x31, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x85}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x214}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044801}, 0x20004080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) creat(0x0, 0xecf86c37d53049dc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 3.961864498s ago: executing program 2 (id=1303): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 'syz1\x00', &(0x7f0000000140)=['/dev/loop'], 0x9}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) r3 = dup(0xffffffffffffffff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, 0x0) 3.961430778s ago: executing program 3 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r6}, 0x8) bpf$LINK_DETACH(0xf, &(0x7f0000000080)=r6, 0x4) 2.051715218s ago: executing program 0 (id=1305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000251000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x5, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000879000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x10000291, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 2.043912158s ago: executing program 1 (id=1306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x11c, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x108, 0x1, [@m_sample={0x104, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x81}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0xc8, 0x6, "0c06c86d27baf1b6526faee46bd4891d23382b46bb626a398158d7f5ae0cee92722c307b80924e78cd94447f62a8383d1823db240dcada2ff955fcd05b40ee59ec18643eb29278e88c00d854d2e027bcad02dd2c1ded7e69ceb79491b656f33269f953964d80eb54a348ff4386f01f45c8cd64dfbf8ace2c9e0208b39ee9e6441cbca529b1bd2f74fee14fa4768f5802c0acadd3aa37183b5c7a2381e3e34321385222a6f51d76332bbd0b4e6fe273b191aff0213811d5a0e63ca45652fb250389c95d34"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x44405) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)={&(0x7f0000000940)=@dellink={0x260, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_PROMISCUITY={0x8}, @IFLA_VFINFO_LIST={0x1f0, 0x16, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}, @IFLA_VF_TRUST={0xc}, @IFLA_VF_TX_RATE={0xc}, @IFLA_VF_VLAN={0x10}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14}, {0x14}, {0x14}, {0x14}, {0x14}, {0x14}, {0x14}]}, @IFLA_VF_VLAN={0x10}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14}, @IFLA_VF_TRUST={0xc}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0xffffffb5}, {0x14}]}, @IFLA_VF_SPOOFCHK={0xc}, @IFLA_VF_RSS_QUERY_EN={0xc}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_CARRIER, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_WEIGHT={0x8}, @IFLA_PROTO_DOWN={0x5}]}, 0x260}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}, @typedef={0x4, 0x0, 0x0, 0x12}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x61]}}, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) unshare(0x480) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x20) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000980008800c000780080005000000000024000780080005"], 0xd0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, &(0x7f0000000100), &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.042715898s ago: executing program 2 (id=1307): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fspick(r1, &(0x7f0000000140)='.\x00', 0x0) 2.042219408s ago: executing program 3 (id=1308): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfea115a26973a207abc5f5e3845bbdc041775155e17070eea2ad4bc9f3c0447194395924f91ba236a188d6a107541de01fe4e626dbf88b57c76945c713c2e274853b3dee5b3cf8de2a9bde26310eff592d4f9"], 0x1, 0x171, &(0x7f00000001c0)="$eJzs289KMlEYx/Hn+P/1LYisFtEiCKJNjhpY7ewCugjRSaSxJNsoQXQpXUaX0iUEtWjXKmMGZ8KjIQnOaZzvZ+Pz+PPgmcUZHwUFQGzVZFeUKMm4zU5u7b6gTG8JQEiGo8fPIYD4SX78doF72wAQfW9nIl0ReX2/a0gyMzEfuHnNzxPZyfxBZDs1ylVO/unzxaPIvr9e5aeuzwf5/6n5wZ7//iuymvKTdSmM8mawfmvGtHM+IwcAIB6UFPV+7ImEXLQduxT0aa8vB33G6ytafxT0Wa8vNq6dpqQXdREA5pIYO//PL0/aIU1q5z+lnX8A0dXrDy7rjmPf/Fy4X/pnvYbCWKH+xjYolqwwfWcCsGjWbadr9fqDw3an3rJb9lW1Uq2elk6Oy5Y3+Fvj479L/4kfQER9f+ib3gkAAAAAAAAAAAAAAJjXhmya3gIAAACAkITxdyLT1wgAAAAAAAAAAAAAAAAAwLL5CgAA//+aZx0+") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 17.794788ms ago: executing program 0 (id=1309): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x81, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x5, 0x2, 0x3}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f0000000400), 0x0) semctl$IPC_RMID(0x0, 0x0, 0xf) syz_open_procfs(0x0, 0x0) 9.400318ms ago: executing program 1 (id=1310): openat$hwrng(0xffffffffffffff9c, 0x0, 0x1c9100, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x0, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) syz_open_dev$usbfs(0x0, 0x77, 0xb8800) syz_emit_vhci(0x0, 0x52) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 483.629µs ago: executing program 2 (id=1311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\n\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="14000200000000000000000000000000000000011400060000000000ff7f000000000000000000"], 0x40}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x2, 0x1, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000000006001e"], 0x24}}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x800000000000000}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12, 0x0) 0s ago: executing program 3 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800c80, &(0x7f0000000200)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@usrquota}, {@resuid}, {@discard}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9b}}, {@nodiscard}]}, 0x0, 0x466, &(0x7f0000000400)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffff1b, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) kernel console output (not intermixed with test programs): e_1) entered disabled state [ 399.064529][ T7178] device bridge_slave_1 entered promiscuous mode [ 400.017813][ T7129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.089336][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.147595][ T7129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.183131][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.270397][ T7178] team0: Port device team_slave_0 added [ 400.368215][ T7129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.415454][ T7271] loop3: detected capacity change from 0 to 164 [ 400.440539][ T7178] team0: Port device team_slave_1 added [ 400.453891][ T7272] loop4: detected capacity change from 0 to 8192 [ 400.505227][ T7272] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 400.516108][ T7272] REISERFS (device loop4): using ordered data mode [ 400.522644][ T7272] reiserfs: using flush barriers [ 400.569311][ T7272] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 400.606522][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.618924][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.626111][ T7272] REISERFS (device loop4): checking transaction log (loop4) [ 400.666570][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.679622][ T7272] REISERFS (device loop4): Using r5 hash to sort names [ 400.696069][ T7272] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 400.707699][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.724657][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.750608][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.848018][ T7272] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 400.877620][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.936446][ T7272] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 400.948003][ T2993] Bluetooth: hci4: command 0x0419 tx timeout [ 401.016198][ T7272] REISERFS (device loop4): Remounting filesystem read-only [ 401.023442][ T7272] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 401.044587][ T7178] device hsr_slave_0 entered promiscuous mode [ 401.067920][ T7272] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 401.096235][ T7178] device hsr_slave_1 entered promiscuous mode [ 401.125531][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.136642][ T7272] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 401.140838][ T7178] Cannot create hsr debugfs directory [ 401.174300][ T7129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.178299][ T7272] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 401.205844][ T7129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.264615][ T7129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.302047][ T7129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.608504][ T7178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.688349][ T7129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.712294][ T7178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.781830][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.798541][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.833493][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.869923][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.886890][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.922957][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.930330][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.973769][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.012770][ T7178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.087154][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.102924][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.130132][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.137277][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.159883][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.218356][ T7178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.281304][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.314996][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.331512][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.354226][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.374426][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.396887][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.433477][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.456446][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.508418][ T7293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 402.510298][ T7129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.566624][ T7129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.605102][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.616527][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.765050][ T7178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.794648][ T7178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.844432][ T7178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.862018][ T7178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.911423][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.954939][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.000212][ T7302] loop3: detected capacity change from 0 to 64 [ 403.015035][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.065438][ T7300] loop2: detected capacity change from 0 to 64 [ 403.232796][ T7129] device veth0_vlan entered promiscuous mode [ 403.243459][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 403.267428][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.278622][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.289560][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.549800][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.564460][ T3629] attempt to access beyond end of device [ 403.564460][ T3629] loop3: rw=1, want=66, limit=64 [ 403.710878][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.762362][ T3629] buffer_io_error: 39 callbacks suppressed [ 403.762519][ T3629] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 403.947929][ T3629] attempt to access beyond end of device [ 403.947929][ T3629] loop3: rw=1, want=67, limit=64 [ 403.959404][ T3629] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 403.972576][ T3629] attempt to access beyond end of device [ 403.972576][ T3629] loop3: rw=1, want=68, limit=64 [ 403.976761][ T7129] device veth1_vlan entered promiscuous mode [ 403.983326][ T3629] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 403.998565][ T3629] attempt to access beyond end of device [ 403.998565][ T3629] loop3: rw=1, want=69, limit=64 [ 404.010802][ T3629] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 404.020050][ T3629] attempt to access beyond end of device [ 404.020050][ T3629] loop3: rw=1, want=73, limit=64 [ 404.031372][ T3629] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 404.040041][ T3629] attempt to access beyond end of device [ 404.040041][ T3629] loop3: rw=1, want=74, limit=64 [ 404.050883][ T3629] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 404.059953][ T3629] attempt to access beyond end of device [ 404.059953][ T3629] loop3: rw=1, want=77, limit=64 [ 404.076110][ T3629] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 404.084680][ T3629] attempt to access beyond end of device [ 404.084680][ T3629] loop3: rw=1, want=78, limit=64 [ 404.097428][ T3629] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 404.120191][ T3629] attempt to access beyond end of device [ 404.120191][ T3629] loop3: rw=1, want=135, limit=64 [ 404.143095][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.165990][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.170604][ T7308] loop4: detected capacity change from 0 to 8192 [ 404.181173][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.191726][ T7129] device veth0_macvtap entered promiscuous mode [ 404.221269][ T7129] device veth1_macvtap entered promiscuous mode [ 404.230799][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 404.250449][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.262488][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.274709][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.309488][ T7178] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.382380][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.394597][ T7308] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 404.400601][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.413704][ T7308] REISERFS (device loop4): using ordered data mode [ 404.413719][ T7308] reiserfs: using flush barriers [ 404.433718][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.436033][ T7308] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 404.444261][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.472530][ T7308] REISERFS (device loop4): checking transaction log (loop4) [ 404.472579][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.488959][ T7308] REISERFS (device loop4): Using rupasov hash to sort names [ 404.490608][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.502054][ T7308] REISERFS (device loop4): using 3.5.x disk format [ 404.507523][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.521857][ T7308] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 404.524355][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.543470][ T7308] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 404.546699][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.566030][ T7308] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 404.581581][ T7308] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 404.603499][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.613928][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.626120][ T4576] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 404.673600][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.691856][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.703255][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.710403][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.773587][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.782360][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.791341][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.798417][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.808328][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.819097][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.011025][ T7318] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 405.022644][ T7318] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 405.100662][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.418373][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.451978][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.474056][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.491581][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.502496][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.512712][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.523290][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.540267][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.615838][ T4576] usb 3-1: Using ep0 maxpacket: 8 [ 405.635913][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.643912][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.654145][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.667729][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.847848][ T7129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.865709][ T7129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.890889][ T4576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.905638][ T7129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.914425][ T4576] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 405.915745][ T7129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.929893][ T4576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.942290][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.019845][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 406.119785][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.173128][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.238404][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.290188][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.352612][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.664574][ T4576] usb 3-1: config 0 descriptor?? [ 406.682577][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.698798][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 406.708100][ T4576] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 406.742844][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.776679][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 407.715404][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.775928][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.820555][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.840562][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.877779][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.933847][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 407.967196][ T3629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.007701][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.016477][ T3629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.027326][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.101344][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.148031][ T7178] device veth0_vlan entered promiscuous mode [ 408.184971][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.193993][ T7340] loop4: detected capacity change from 0 to 65536 [ 408.227143][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.242314][ T7178] device veth1_vlan entered promiscuous mode [ 408.270704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.278768][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.287276][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.299587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.323713][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.334099][ T7340] XFS (loop4): Mounting V5 Filesystem [ 408.335866][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.379699][ T7178] device veth0_macvtap entered promiscuous mode [ 408.380089][ T7340] XFS (loop4): Ending clean mount [ 408.696158][ T4576] gspca_vc032x: reg_w err -71 [ 408.703788][ T4576] vc032x: probe of 3-1:0.0 failed with error -71 [ 408.795857][ T7178] device veth1_macvtap entered promiscuous mode [ 408.847501][ T4576] usb 3-1: USB disconnect, device number 6 [ 409.045841][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.053982][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.086159][ T7340] XFS (loop4): Quotacheck needed: Please wait. [ 409.123165][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.138805][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.155845][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.188987][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.207931][ T7340] XFS (loop4): Quotacheck: Done. [ 409.236107][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.433962][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.804471][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.833973][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.844729][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.863238][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.950981][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.987576][ T3979] XFS (loop4): Unmounting Filesystem [ 412.030272][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 412.060311][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.121791][ T7365] loop2: detected capacity change from 0 to 8192 [ 412.238722][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.271135][ T7365] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 412.285453][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.326272][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.350541][ T7365] REISERFS (device loop2): using ordered data mode [ 412.406447][ T7365] reiserfs: using flush barriers [ 412.469471][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.560637][ T7365] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 412.669796][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.773446][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.793376][ T7365] REISERFS (device loop2): checking transaction log (loop2) [ 412.870934][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.884251][ T7370] loop3: detected capacity change from 0 to 256 [ 412.902683][ T7365] REISERFS (device loop2): Using rupasov hash to sort names [ 412.938842][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.952105][ T7365] REISERFS (device loop2): using 3.5.x disk format [ 412.959853][ T7365] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 412.972333][ T7365] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 412.984127][ T7365] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 412.987262][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.995214][ T7365] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 413.016941][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.024349][ T7372] loop1: detected capacity change from 0 to 1024 [ 413.034293][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.044863][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.064724][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.101193][ T7370] exfat: Deprecated parameter 'utf8' [ 413.144243][ T7178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.156110][ T7370] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 413.178128][ T7178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.202229][ T7178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.216813][ T7178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.258928][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.456783][ T7374] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 413.468370][ T7374] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 413.570439][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.000121][ T7370] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 414.009742][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'. [ 414.445865][ T3948] hfsplus: b-tree write err: -5, ino 4 [ 415.005356][ T4588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.074812][ T4588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.872514][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 415.892087][ T155] device hsr_slave_0 left promiscuous mode [ 416.912602][ T155] device hsr_slave_1 left promiscuous mode [ 416.973073][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.029026][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.122025][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.176632][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.224203][ T155] device bridge_slave_1 left promiscuous mode [ 417.255345][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.311131][ T155] device bridge_slave_0 left promiscuous mode [ 417.344955][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.454824][ T155] device hsr_slave_0 left promiscuous mode [ 417.494667][ T155] device hsr_slave_1 left promiscuous mode [ 417.530606][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.570772][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.620694][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.657874][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.708083][ T155] device bridge_slave_1 left promiscuous mode [ 417.748260][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.826421][ T7404] loop4: detected capacity change from 0 to 1024 [ 417.908420][ T155] device bridge_slave_0 left promiscuous mode [ 418.001401][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.586913][ T155] device veth1_macvtap left promiscuous mode [ 418.703826][ T155] device veth0_macvtap left promiscuous mode [ 418.730785][ T155] device veth1_vlan left promiscuous mode [ 418.736826][ T155] device veth0_vlan left promiscuous mode [ 418.744247][ T155] device veth1_macvtap left promiscuous mode [ 418.752606][ T155] device veth0_macvtap left promiscuous mode [ 418.758817][ T155] device veth1_vlan left promiscuous mode [ 418.932914][ T155] device veth0_vlan left promiscuous mode [ 419.313410][ T7413] tmpfs: Unknown parameter 'fscontext' [ 419.381710][ T155] team0 (unregistering): Port device team_slave_1 removed [ 419.395012][ T155] team0 (unregistering): Port device team_slave_0 removed [ 419.407125][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.422179][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.485584][ T155] bond0 (unregistering): Released all slaves [ 419.601390][ T155] team0 (unregistering): Port device team_slave_1 removed [ 419.613974][ T155] team0 (unregistering): Port device team_slave_0 removed [ 419.626243][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.642101][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.704649][ T155] bond0 (unregistering): Released all slaves [ 419.751142][ T4588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.762390][ T4588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.779517][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 420.100166][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 420.155072][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 420.214833][ T7424] device geneve2 entered promiscuous mode [ 420.320054][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.460164][ T7432] loop4: detected capacity change from 0 to 512 [ 420.518649][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 420.585493][ T7432] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 420.603895][ T7432] EXT4-fs (loop4): 1 truncate cleaned up [ 420.638653][ T7432] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 420.761758][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.785997][ T7434] kvm [7431]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 420.795474][ T7434] kvm [7431]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 420.811995][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.835974][ T3619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.836748][ T7428] device bridge_slave_0 entered promiscuous mode [ 420.885397][ T7434] kvm [7431]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 420.887864][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.902330][ T7434] kvm [7431]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 420.915763][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.924886][ T7434] kvm [7431]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x0 [ 420.927029][ T7428] device bridge_slave_1 entered promiscuous mode [ 421.115979][ T4149] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 421.556537][ T4149] usb 2-1: New USB device found, idVendor=9710, idProduct=7843, bcdDevice= 7.b4 [ 421.603033][ T4149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.783641][ T4149] usb 2-1: config 0 descriptor?? [ 421.905150][ T4149] mos7840 2-1:0.0: required endpoints missing [ 422.211825][ T3620] usb 2-1: USB disconnect, device number 8 [ 422.397580][ T4153] Bluetooth: hci3: command 0x0409 tx timeout [ 423.257497][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.481490][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.844866][ T4577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.974646][ T4577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.991447][ T7428] team0: Port device team_slave_0 added [ 424.013087][ T7459] loop4: detected capacity change from 0 to 8192 [ 424.061083][ T7428] team0: Port device team_slave_1 added [ 424.111375][ T7459] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 424.129919][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.130790][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 424.156125][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.215851][ T7459] REISERFS (device loop4): using ordered data mode [ 424.222386][ T7459] reiserfs: using flush barriers [ 424.241956][ T7464] syz.1.878 (7464): /proc/7463/oom_adj is deprecated, please use /proc/7463/oom_score_adj instead. [ 424.268731][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.279435][ T7459] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 424.311881][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.348524][ T7459] REISERFS (device loop4): checking transaction log (loop4) [ 424.367205][ T7459] REISERFS (device loop4): Using r5 hash to sort names [ 424.409253][ T7459] reiserfs: enabling write barrier flush mode [ 424.428233][ T7459] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 424.447953][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.474870][ T4577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.479310][ T4153] Bluetooth: hci3: command 0x041b tx timeout [ 424.498943][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.513613][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 424.660933][ T7428] device hsr_slave_0 entered promiscuous mode [ 424.691621][ T7428] device hsr_slave_1 entered promiscuous mode [ 424.705391][ T7428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.720104][ T7428] Cannot create hsr debugfs directory [ 424.793885][ T26] audit: type=1400 audit(1729306054.831:87): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7458 comm="syz.4.875" [ 425.228035][ T7428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.376783][ T7428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.385789][ T4576] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 425.472351][ T7428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.531065][ T7481] loop0: detected capacity change from 0 to 512 [ 425.555380][ T7428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.625821][ T4576] usb 3-1: Using ep0 maxpacket: 32 [ 425.736596][ T7481] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 425.746735][ T7481] EXT4-fs (loop0): 1 truncate cleaned up [ 425.752558][ T7481] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 425.916588][ T4576] usb 3-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=af.e4 [ 426.003881][ T4576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.077437][ T4576] usb 3-1: Product: syz [ 426.088493][ T7428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.097652][ T4576] usb 3-1: Manufacturer: syz [ 426.105625][ T4576] usb 3-1: SerialNumber: syz [ 426.129342][ T7428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 426.140522][ T4576] usb 3-1: config 0 descriptor?? [ 426.322055][ T4576] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 426.333273][ T7428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 426.365639][ T7428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 426.435836][ T4576] usb 3-1: qt2_attach - failed to power on unit: -71 [ 426.444759][ T4576] quatech2: probe of 3-1:0.0 failed with error -71 [ 426.483361][ T4576] usb 3-1: USB disconnect, device number 7 [ 426.546285][ T4149] Bluetooth: hci3: command 0x040f tx timeout [ 426.569201][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.590340][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.614189][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.656813][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.718219][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 426.765707][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.942816][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.950125][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.389570][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.518653][ T7505] loop2: detected capacity change from 0 to 1 [ 427.531542][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.556345][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.564788][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.571896][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.582729][ T7508] loop0: detected capacity change from 0 to 2048 [ 427.586808][ T7505] attempt to access beyond end of device [ 427.586808][ T7505] loop2: rw=2048, want=8, limit=1 [ 427.631287][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.641119][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.650552][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.653127][ T7505] SQUASHFS error: Failed to read block 0x0: -5 [ 427.671749][ T7508] loop0: p2 < > [ 427.699147][ T7505] unable to read squashfs_super_block [ 427.715592][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.745532][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.759623][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.768591][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.782541][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.812472][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.826023][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.848742][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 427.862257][ T7505] loop2: detected capacity change from 0 to 128 [ 427.879526][ T7428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.929658][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.949720][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.038961][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 428.310665][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.349708][ T7515] loop0: detected capacity change from 0 to 2048 [ 428.404466][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.673119][ T7512] loop1: detected capacity change from 0 to 8192 [ 428.752585][ T7515] NILFS (loop0): invalid segment: Checksum error in segment payload [ 428.803239][ T7515] NILFS (loop0): trying rollback from an earlier position [ 428.864390][ T7512] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 428.893607][ T4149] Bluetooth: hci3: command 0x0419 tx timeout [ 428.908484][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.909079][ T7512] REISERFS (device loop1): using ordered data mode [ 428.937002][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.945189][ T7512] reiserfs: using flush barriers [ 428.957546][ T7515] NILFS (loop0): recovery complete [ 428.967084][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.978185][ T7512] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 428.983256][ T7428] device veth0_vlan entered promiscuous mode [ 429.014562][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.066223][ T7512] REISERFS (device loop1): checking transaction log (loop1) [ 429.086183][ T7521] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.096896][ T7512] REISERFS (device loop1): Using r5 hash to sort names [ 429.099018][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.130527][ T7512] reiserfs: enabling write barrier flush mode [ 429.183683][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.193350][ T7512] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 429.226650][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.264467][ T26] audit: type=1804 audit(1729306059.301:88): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.894" name="/newroot/7/file0/file1" dev="loop0" ino=12 res=1 errno=0 [ 429.289449][ T7428] device veth1_vlan entered promiscuous mode [ 429.324425][ T7515] netlink: 216 bytes leftover after parsing attributes in process `syz.0.894'. [ 429.395330][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 429.412889][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.489964][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.526059][ T26] audit: type=1400 audit(1729306059.521:89): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7511 comm="syz.1.893" [ 429.625000][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.684751][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.699133][ T7525] loop2: detected capacity change from 0 to 4096 [ 429.737026][ T7428] device veth0_macvtap entered promiscuous mode [ 429.789210][ T7428] device veth1_macvtap entered promiscuous mode [ 429.832402][ T7525] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 429.918144][ T7525] ntfs3: loop2: Failed to load $MFTMirr. [ 429.942912][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.958367][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.968604][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.979266][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.996148][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.012921][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.023035][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.025633][ T7532] loop4: detected capacity change from 0 to 64 [ 430.040890][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.087067][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.106455][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.118007][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.126531][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.144068][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.187993][ T7532] MINIX-fs: bad superblock [ 430.201635][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.238452][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.262387][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.283268][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.293737][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.223272][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.891669][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.902526][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.967326][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.009996][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.149459][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.169930][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.188608][ T7549] loop2: detected capacity change from 0 to 128 [ 432.197095][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.290405][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 432.329547][ T7549] VFS: unable to find oldfs superblock on device loop2 [ 432.347747][ T7428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.379168][ T7428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.394668][ T7550] loop0: detected capacity change from 0 to 8192 [ 432.413333][ T7428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.422879][ T7428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.474219][ T7549] loop2: detected capacity change from 0 to 512 [ 432.534435][ T7550] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 432.586744][ T7550] REISERFS (device loop0): using ordered data mode [ 432.593626][ T7550] reiserfs: using flush barriers [ 432.607293][ T7550] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 432.616621][ T7559] sp0: Synchronizing with TNC [ 432.643182][ T7550] REISERFS (device loop0): checking transaction log (loop0) [ 432.679055][ T7549] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 432.705756][ T7549] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 432.723577][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.724719][ T7550] REISERFS (device loop0): Using rupasov hash to sort names [ 432.731927][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.749244][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 432.756266][ T7549] System zones: 0-1, 15-15, 18-18 [ 432.757360][ T7550] REISERFS (device loop0): using 3.5.x disk format [ 432.762577][ T7550] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 432.785078][ T7550] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 432.797738][ T7550] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 432.811531][ T7550] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 432.886589][ T7549] , 34-34 [ 432.936058][ T7549] EXT4-fs (loop2): orphan cleanup on readonly fs [ 433.048059][ T7549] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 433.214656][ T7549] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 433.372578][ T7549] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 433.386185][ T7549] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.904: bad orphan inode 16 [ 433.440776][ T7549] ext4_test_bit(bit=15, block=18) = 1 [ 433.458837][ T7549] is_bad_inode(inode)=0 [ 433.463030][ T7549] NEXT_ORPHAN(inode)=0 [ 433.467411][ T7549] max_ino=32 [ 433.470617][ T7549] i_nlink=2 [ 433.473804][ T7549] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 433.677327][ T7568] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 433.688983][ T7568] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 434.116201][ T7549] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 434.255969][ T3964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.280352][ T3964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.307396][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 434.495628][ T7570] loop1: detected capacity change from 0 to 512 [ 435.436537][ T7570] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 435.454975][ T7570] EXT4-fs (loop1): 1 truncate cleaned up [ 435.471527][ T7570] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 435.600455][ T7590] binder: 7588:7590 ioctl c0306201 0 returned -14 [ 435.651278][ T7570] kvm [7569]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x2bdad2d00000009a [ 435.663555][ T7570] kvm [7569]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x2bdad2d00000009b [ 435.678770][ T7570] kvm [7569]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x2bdad2d000000000 [ 435.942642][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 436.062431][ T7605] xt_hashlimit: max too large, truncated to 1048576 [ 436.290926][ T7611] fuse: Bad value for 'fd' [ 437.186014][ T3620] Bluetooth: hci1: command 0x0406 tx timeout [ 437.288313][ T7619] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 438.225061][ T155] device hsr_slave_0 left promiscuous mode [ 438.234272][ T7623] loop1: detected capacity change from 0 to 8192 [ 438.255223][ T155] device hsr_slave_1 left promiscuous mode [ 438.273015][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.293380][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.328618][ T7623] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 438.338679][ T7623] REISERFS (device loop1): using ordered data mode [ 438.345209][ T7623] reiserfs: using flush barriers [ 438.353025][ T7623] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 438.354312][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.369819][ T7623] REISERFS (device loop1): checking transaction log (loop1) [ 438.398702][ T7623] REISERFS (device loop1): Using rupasov hash to sort names [ 438.403355][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.414006][ T7623] REISERFS (device loop1): using 3.5.x disk format [ 438.420810][ T7623] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 438.432402][ T7623] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 438.433622][ T7632] kvm [7630]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3 [ 438.450456][ T7623] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 438.453185][ T155] device bridge_slave_1 left promiscuous mode [ 438.463799][ T4576] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 438.470983][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.478516][ T7623] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 438.485110][ T7644] capability: warning: `syz.4.929' uses deprecated v2 capabilities in a way that may be insecure [ 438.512235][ T7632] kvm [7630]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4 [ 438.512346][ T7632] kvm [7630]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4 [ 438.530089][ T155] device bridge_slave_0 left promiscuous mode [ 438.530221][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.106310][ T7650] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 441.117557][ T7650] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 441.381547][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.401150][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.458047][ T4576] usb 3-1: Using ep0 maxpacket: 8 [ 441.476605][ T155] device veth1_macvtap left promiscuous mode [ 441.483430][ T155] device veth0_macvtap left promiscuous mode [ 441.489658][ T155] device veth1_vlan left promiscuous mode [ 441.495545][ T155] device veth0_vlan left promiscuous mode [ 441.576247][ T4576] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.613327][ T4576] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.623147][ T4576] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 441.634778][ T4576] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 442.290068][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'. [ 442.321292][ T4576] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 442.330681][ T4576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.390795][ T7666] kAFS: unable to lookup cell '.,' [ 442.404339][ T7665] loop4: detected capacity change from 0 to 512 [ 442.435802][ T4576] usb 3-1: can't set config #1, error -71 [ 442.446391][ T4576] usb 3-1: USB disconnect, device number 8 [ 442.461462][ T7665] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 442.638961][ T7665] EXT4-fs (loop4): 1 truncate cleaned up [ 442.646892][ T7665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 444.783907][ T7674] loop2: detected capacity change from 0 to 128 [ 444.878847][ T7673] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 444.887193][ T7673] FAT-fs (loop2): Filesystem has been set read-only [ 444.893805][ T7673] attempt to access beyond end of device [ 444.893805][ T7673] loop2: rw=524288, want=2073, limit=128 [ 444.905310][ T7673] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 444.913400][ T7673] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 444.933586][ T7673] attempt to access beyond end of device [ 444.933586][ T7673] loop2: rw=0, want=2073, limit=128 [ 444.950367][ T26] audit: type=1800 audit(1729306330.986:90): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.936" name="file2" dev="loop2" ino=1048654 res=0 errno=0 [ 444.965807][ T4577] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 445.091067][ T155] team0 (unregistering): Port device team_slave_1 removed [ 445.115413][ T7684] loop4: detected capacity change from 0 to 1024 [ 445.184827][ T155] team0 (unregistering): Port device team_slave_0 removed [ 445.226047][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.433385][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.506042][ T4577] usb 4-1: unable to read config index 0 descriptor/all [ 445.517057][ T4577] usb 4-1: can't read configurations, error -71 [ 446.262045][ T155] bond0 (unregistering): Released all slaves [ 446.697239][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 446.981892][ T7708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.947'. [ 448.066504][ T7712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.948'. [ 448.392709][ T4576] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 448.795715][ T4576] usb 3-1: Using ep0 maxpacket: 32 [ 449.196882][ T4576] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 449.338414][ T4576] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.616490][ T4576] usb 3-1: config 1 interface 0 has no altsetting 0 [ 450.876666][ T4576] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 450.889654][ T4576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.898414][ T4576] usb 3-1: Product: syz [ 450.902588][ T4576] usb 3-1: Manufacturer: syz [ 450.907538][ T4576] usb 3-1: SerialNumber: syz [ 450.914473][ T3619] Bluetooth: hci4: command 0x0405 tx timeout [ 450.959423][ T7719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.978017][ T7719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.010053][ T4576] usb 3-1: can't set config #1, error -71 [ 451.025467][ T4576] usb 3-1: USB disconnect, device number 9 [ 451.062814][ T7733] chnl_net:caif_netlink_parms(): no params data found [ 452.010338][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.245310][ T7783] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 453.086858][ T3617] Bluetooth: hci4: command 0x0409 tx timeout [ 453.111907][ T7799] program syz.1.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.349149][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.365704][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.366605][ T7799] loop1: detected capacity change from 0 to 32768 [ 455.431293][ T7733] device bridge_slave_0 entered promiscuous mode [ 455.448300][ T7804] loop4: detected capacity change from 0 to 512 [ 455.476416][ T7799] XFS: attr2 mount option is deprecated. [ 455.482091][ T7799] xfs: Unknown parameter 'uq' [ 455.507645][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 455.546130][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.553245][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.599474][ T7733] device bridge_slave_1 entered promiscuous mode [ 455.957506][ T7804] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.972: bad orphan inode 15 [ 455.984758][ T7804] ext4_test_bit(bit=14, block=5) = 0 [ 456.002711][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.017837][ T7809] loop3: detected capacity change from 0 to 512 [ 456.038087][ T7804] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 456.071718][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 456.097775][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.143861][ T7809] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 456.156046][ T7803] EXT4-fs error (device loop4): __ext4_new_inode:1076: comm syz.4.972: reserved inode found cleared - inode=1 [ 456.163646][ T7809] EXT4-fs (loop3): 1 truncate cleaned up [ 456.175857][ T7809] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 456.196358][ T7823] loop2: detected capacity change from 0 to 2048 [ 456.326073][ T7733] team0: Port device team_slave_0 added [ 456.376000][ T7733] team0: Port device team_slave_1 added [ 456.449478][ T7804] cgroup: No subsys list or none specified [ 456.472055][ T7823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.492185][ T7831] sp0: Synchronizing with TNC [ 456.552120][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.572317][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.754753][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.116662][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.142195][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.372197][ T7822] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 457.387044][ T7822] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 457.399217][ T7822] EXT4-fs (loop2): This should not happen!! Data will be lost [ 457.399217][ T7822] [ 457.409131][ T7822] EXT4-fs (loop2): Total free blocks count 0 [ 457.415114][ T7822] EXT4-fs (loop2): Free/Dirty block details [ 457.421091][ T7822] EXT4-fs (loop2): free_blocks=66060288 [ 457.426762][ T7822] EXT4-fs (loop2): dirty_blocks=16 [ 457.431869][ T7822] EXT4-fs (loop2): Block reservation details [ 457.437898][ T7822] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 457.449411][ T2993] Bluetooth: hci4: command 0x041b tx timeout [ 457.473051][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.537676][ T7835] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 457.931256][ T7733] device hsr_slave_0 entered promiscuous mode [ 458.063531][ T7733] device hsr_slave_1 entered promiscuous mode [ 458.836507][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 459.172721][ T7733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.264586][ T7866] futex_wake_op: syz.2.990 tries to shift op by -1; fix this program [ 459.294150][ T7870] loop4: detected capacity change from 0 to 512 [ 459.302731][ T7733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.490256][ T7733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.516229][ T2993] Bluetooth: hci4: command 0x0419 tx timeout [ 459.529594][ T7870] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 459.540558][ T7870] EXT4-fs (loop4): 1 truncate cleaned up [ 459.547175][ T7870] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 459.598329][ T7733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.630186][ T7880] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.982167][ T7888] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 460.052176][ T7733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.091459][ T7733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 460.138605][ T7888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.153634][ T7898] loop3: detected capacity change from 0 to 24 [ 460.195067][ T7891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.212441][ T7898] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 460.223984][ T7891] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 460.254644][ T7733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 460.267501][ T7903] futex_wake_op: syz.2.1001 tries to shift op by -1; fix this program [ 460.281083][ T7733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 460.286754][ T7898] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 460.872922][ T7733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.949976][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.001116][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.037209][ T7733] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.084702][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.107495][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.122517][ T7911] loop4: detected capacity change from 0 to 512 [ 461.139511][ T4588] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.146639][ T4588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.199895][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.254837][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.283159][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.294677][ T7911] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 461.316372][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.316438][ T7911] EXT4-fs (loop4): 1 truncate cleaned up [ 461.323475][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.343164][ T7911] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 461.372326][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.385243][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.412667][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.530200][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.539160][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 462.201193][ T2993] Bluetooth: hci4: command 0x0406 tx timeout [ 462.249032][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 462.345352][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.367049][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.414897][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.495225][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.535513][ T7733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.570060][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 462.843297][ T155] device hsr_slave_0 left promiscuous mode [ 462.873464][ T155] device hsr_slave_1 left promiscuous mode [ 463.472106][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.513233][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.530796][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.549772][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.568007][ T155] device bridge_slave_1 left promiscuous mode [ 463.591099][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.650595][ T155] device bridge_slave_0 left promiscuous mode [ 463.671970][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.723252][ T155] device veth1_macvtap left promiscuous mode [ 463.745145][ T155] device veth0_macvtap left promiscuous mode [ 463.779178][ T155] device veth1_vlan left promiscuous mode [ 463.789581][ T155] device veth0_vlan left promiscuous mode [ 463.888022][ T7945] futex_wake_op: syz.3.1012 tries to shift op by -1; fix this program [ 464.310162][ T155] team0 (unregistering): Port device team_slave_1 removed [ 464.323566][ T155] team0 (unregistering): Port device team_slave_0 removed [ 464.336205][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.350731][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.442094][ T155] bond0 (unregistering): Released all slaves [ 464.695191][ T7963] netlink: 'syz.2.1017': attribute type 10 has an invalid length. [ 464.749101][ T7963] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 464.765765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.765905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.779104][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.813558][ T7963] wlan1: mtu less than device minimum [ 464.861104][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.871882][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.906841][ T7969] futex_wake_op: syz.4.1016 tries to shift op by -1; fix this program [ 464.923991][ T7733] device veth0_vlan entered promiscuous mode [ 464.969270][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.997748][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.016741][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.024938][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.053244][ T7733] device veth1_vlan entered promiscuous mode [ 465.095761][ T4503] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 465.169889][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 465.190416][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 465.210339][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.234737][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.275903][ T7979] ALSA: seq fatal error: cannot create timer (-22) [ 465.341903][ T7981] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 465.365819][ T4503] usb 4-1: Using ep0 maxpacket: 32 [ 465.479888][ T7733] device veth0_macvtap entered promiscuous mode [ 465.501142][ T4503] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.644736][ T4503] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.701771][ T7733] device veth1_macvtap entered promiscuous mode [ 465.842783][ T4503] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 466.006842][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 466.015024][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.023087][ T4503] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 466.041469][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.067990][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.103689][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.115205][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.147725][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.161977][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.173763][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.184199][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.194679][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.204949][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.242016][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.276433][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.298040][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.325823][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.394848][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.455765][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.521067][ T7733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.530313][ T4503] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.558531][ T4503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.566883][ T4503] usb 4-1: Product: syz [ 466.571350][ T4503] usb 4-1: Manufacturer: syz [ 466.576009][ T4503] usb 4-1: SerialNumber: syz [ 466.583805][ T7733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.596473][ T7733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.605185][ T7733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.712992][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.753673][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.766122][ T5246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.774492][ T5246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.775946][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 466.809653][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.824441][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.833641][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.843088][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 466.851658][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.896124][ T4503] cdc_ncm 4-1:1.0: bind() failure [ 466.915527][ T4503] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 466.942759][ T4503] cdc_ncm 4-1:1.1: bind() failure [ 466.983543][ T4503] usb 4-1: USB disconnect, device number 10 [ 467.011676][ T7999] loop0: detected capacity change from 0 to 16 [ 467.111704][ T7999] erofs: (device loop0): mounted with root inode @ nid 36. [ 467.158947][ T26] audit: type=1800 audit(1729306353.206:91): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.949" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 467.575706][ T4503] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 467.946128][ T4503] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0 [ 468.014195][ T4503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.401570][ T4503] usb 1-1: config 0 descriptor?? [ 468.411022][ T8006] futex_wake_op: syz.3.1027 tries to shift op by -1; fix this program [ 469.016135][ T4503] kl5kusb105 1-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 469.341444][ T4503] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 469.412363][ T4503] usb 1-1: USB disconnect, device number 10 [ 469.525070][ T8023] futex_wake_op: syz.3.1031 tries to shift op by -1; fix this program [ 469.537725][ T4503] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 469.637677][ T4503] kl5kusb105 1-1:0.0: device disconnected [ 469.644955][ T8025] loop2: detected capacity change from 0 to 512 [ 469.772485][ T8025] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 469.983920][ T8025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1032: inode #1: comm syz.2.1032: iget: illegal inode # [ 470.010201][ T8025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1032: error while reading EA inode 1 err=-117 [ 470.185104][ T8025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1032: inode #1: comm syz.2.1032: iget: illegal inode # [ 470.512719][ T8025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1032: error while reading EA inode 1 err=-117 [ 470.733026][ T8025] EXT4-fs (loop2): 1 orphan inode deleted [ 470.738866][ T8025] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 471.918453][ T8060] futex_wake_op: syz.3.1041 tries to shift op by -1; fix this program [ 472.241676][ T8071] loop3: detected capacity change from 0 to 1024 [ 472.249486][ T8068] futex_wake_op: syz.2.1039 tries to shift op by -1; fix this program [ 472.268107][ T8074] futex_wake_op: syz.0.1043 tries to shift op by -1; fix this program [ 472.403080][ T8071] EXT4-fs (loop3): Ignoring removed bh option [ 472.573385][ T8071] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 472.950717][ T26] audit: type=1800 audit(1729306358.986:92): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1044" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 473.697445][ T8092] 9pnet: p9_errstr2errno: server reported unknown error [ 475.437541][ T8110] loop4: detected capacity change from 0 to 1024 [ 475.791962][ T8110] EXT4-fs (loop4): Test dummy encryption mode enabled [ 476.005554][ T8110] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.1052: inode #0: comm syz.4.1052: iget: illegal inode # [ 476.070968][ T8110] EXT4-fs (loop4): Remounting filesystem read-only [ 476.111678][ T8130] futex_wake_op: syz.0.1056 tries to shift op by -1; fix this program [ 476.135797][ T8110] EXT4-fs (loop4): get orphan inode failed [ 476.176487][ T8110] EXT4-fs (loop4): mount failed [ 476.207503][ T8132] futex_wake_op: syz.3.1055 tries to shift op by -1; fix this program [ 476.601525][ T26] audit: type=1326 audit(1729306362.626:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 477.195142][ T26] audit: type=1326 audit(1729306362.626:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 477.232435][ T26] audit: type=1326 audit(1729306362.636:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 477.304944][ T26] audit: type=1326 audit(1729306362.636:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 477.402864][ T26] audit: type=1326 audit(1729306362.636:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 477.525841][ T26] audit: type=1326 audit(1729306362.646:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 477.603143][ T26] audit: type=1326 audit(1729306362.646:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 477.701403][ T8148] loop0: detected capacity change from 0 to 512 [ 477.706696][ T26] audit: type=1326 audit(1729306362.646:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd9872ff9 code=0x7ffc0000 [ 478.208256][ T8148] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 478.299780][ T8148] EXT4-fs (loop0): 1 truncate cleaned up [ 478.837473][ T8148] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 480.272253][ T8177] futex_wake_op: syz.1.1067 tries to shift op by -1; fix this program [ 481.252358][ T8182] loop4: detected capacity change from 0 to 32768 [ 481.338430][ T8182] (syz.4.1068,8182,1):ocfs2_read_virt_blocks:991 ERROR: Inode #18 contains a hole at offset 4096 [ 481.350084][ T8182] (syz.4.1068,8182,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 481.359021][ T8182] (syz.4.1068,8182,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 481.368007][ T8182] (syz.4.1068,8182,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 5, possibly corrupt fs? [ 481.368038][ T8182] (syz.4.1068,8182,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 481.389487][ T8182] (syz.4.1068,8182,1):ocfs2_initialize_super:2278 ERROR: status = -22 [ 481.397687][ T8182] (syz.4.1068,8182,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 481.417833][ T8184] loop1: detected capacity change from 0 to 1024 [ 481.689024][ T9] hfsplus: b-tree write err: -5, ino 4 [ 483.362115][ T9] hfsplus: b-tree write err: -5, ino 4 [ 483.561137][ T8199] loop2: detected capacity change from 0 to 4096 [ 483.787861][ T8199] EXT4-fs (loop2): Invalid commit interval 67106816, must be smaller than 21474836 [ 484.063702][ T26] audit: type=1400 audit(1729306370.106:101): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8214 comm="syz.4.1081" [ 484.139443][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1079'. [ 484.894543][ T8224] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1082'. [ 485.919592][ T8231] loop0: detected capacity change from 0 to 8192 [ 485.955350][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 485.996906][ T8231] ntfs3: Unknown parameter '3Ƿ(' [ 486.033828][ T8246] futex_wake_op: syz.2.1088 tries to shift op by -1; fix this program [ 487.206530][ T8255] loop3: detected capacity change from 0 to 512 [ 487.291145][ T8255] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 487.291145][ T8255] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 487.291145][ T8255] [ 487.527571][ T8261] program syz.0.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.734651][ T8255] EXT4-fs (loop3): 1 orphan inode deleted [ 487.809956][ T8255] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback. [ 488.057879][ T8255] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.496058][ T8266] tmpfs: Bad value for 'nr_inodes' [ 490.881916][ T8293] loop0: detected capacity change from 0 to 32768 [ 490.964315][ T8303] futex_wake_op: syz.3.1100 tries to shift op by -1; fix this program [ 491.042654][ T8293] XFS (loop0): Mounting V5 Filesystem [ 492.479240][ T8293] XFS (loop0): Ending clean mount [ 492.490799][ T8293] XFS (loop0): Quotacheck needed: Please wait. [ 492.537722][ T8316] loop1: detected capacity change from 0 to 2048 [ 492.559283][ T8293] XFS (loop0): Quotacheck: Done. [ 492.885833][ T4503] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 493.156329][ T4503] usb 1-1: device descriptor read/64, error -71 [ 493.173945][ T8316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 493.555831][ T4503] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 493.776111][ T7733] XFS (loop0): Unmounting Filesystem [ 493.909734][ T26] audit: type=1326 audit(1729306379.926:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 494.866306][ T26] audit: type=1326 audit(1729306379.926:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 495.085941][ T8345] loop4: detected capacity change from 0 to 16 [ 495.095394][ T26] audit: type=1326 audit(1729306379.926:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 495.118556][ T26] audit: type=1326 audit(1729306379.926:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 495.151823][ T26] audit: type=1326 audit(1729306379.926:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 495.175007][ T26] audit: type=1326 audit(1729306379.926:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 495.215450][ T8345] erofs: (device loop4): mounted with root inode @ nid 36. [ 495.292990][ T26] audit: type=1326 audit(1729306379.926:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 495.321818][ T8349] futex_wake_op: syz.2.1113 tries to shift op by -1; fix this program [ 495.373698][ T26] audit: type=1326 audit(1729306379.926:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b920ff9 code=0x7ffc0000 [ 495.451587][ T26] audit: type=1800 audit(1729306381.296:110): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1111" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 495.472028][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.822801][ T4153] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 496.296775][ T4153] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0 [ 496.375164][ T4153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.466691][ T4153] usb 5-1: config 0 descriptor?? [ 496.510195][ T4153] kl5kusb105 5-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 496.543793][ T4153] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 500.524434][ T4503] usb 5-1: USB disconnect, device number 5 [ 500.546329][ T4503] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 500.574618][ T4503] kl5kusb105 5-1:0.0: device disconnected [ 500.815383][ T8376] loop4: detected capacity change from 0 to 512 [ 501.188455][ T8376] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 501.555542][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.561910][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.677678][ T8376] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1118: inode #1: comm syz.4.1118: iget: illegal inode # [ 501.705956][ T8376] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1118: error while reading EA inode 1 err=-117 [ 501.721268][ T8387] loop0: detected capacity change from 0 to 512 [ 501.867840][ T8387] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 501.867840][ T8387] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 501.867840][ T8387] [ 501.894840][ T8376] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1118: inode #1: comm syz.4.1118: iget: illegal inode # [ 501.971923][ T8376] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1118: error while reading EA inode 1 err=-117 [ 502.029420][ T8376] EXT4-fs (loop4): 1 orphan inode deleted [ 502.063480][ T8376] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 502.100540][ T8387] EXT4-fs (loop0): 1 orphan inode deleted [ 502.117609][ T8387] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback. [ 502.212765][ T8388] loop3: detected capacity change from 0 to 65536 [ 502.215805][ T8387] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.050342][ T8388] XFS (loop3): Mounting V5 Filesystem [ 503.323128][ T8388] XFS (loop3): Ending clean mount [ 503.330026][ T8388] XFS (loop3): Quotacheck needed: Please wait. [ 503.414386][ T8388] XFS (loop3): Quotacheck: Done. [ 503.655534][ T8414] futex_wake_op: syz.2.1124 tries to shift op by -1; fix this program [ 504.506446][ T8422] kernel read not supported for file / n-!_(W (pid: 8422 comm: syz.4.1126) [ 504.582104][ T26] audit: type=1800 audit(1729306390.616:111): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1126" name=20FFFF6E2D21FB90E25F2899D657FFEC dev="mqueue" ino=52846 res=0 errno=0 [ 504.594704][ T7428] XFS (loop3): Unmounting Filesystem [ 504.855799][ T4149] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 505.105929][ T4149] usb 5-1: Using ep0 maxpacket: 16 [ 505.286156][ T4149] usb 5-1: unable to get BOS descriptor or descriptor too short [ 505.446770][ T4149] usb 5-1: config 0 has too many interfaces: 222, using maximum allowed: 32 [ 505.455564][ T4576] Bluetooth: hci4: command 0x0405 tx timeout [ 505.481004][ T4149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.558939][ T4149] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 222 [ 505.607269][ T8431] loop1: detected capacity change from 0 to 16 [ 505.751082][ T8431] erofs: (device loop1): mounted with root inode @ nid 36. [ 505.824405][ T26] audit: type=1800 audit(1729306391.866:112): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1130" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 505.909942][ T4149] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.940889][ T4149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.981418][ T4149] usb 5-1: Product: syz [ 506.005910][ T4149] usb 5-1: Manufacturer: syz [ 506.031888][ T4149] usb 5-1: SerialNumber: syz [ 506.110931][ T4149] usb 5-1: config 0 descriptor?? [ 506.187983][ T4149] cdc_mbim 5-1:0.0: MBIM functional descriptor missing [ 506.194982][ T4149] cdc_mbim 5-1:0.0: bind() failure [ 506.531962][ T4503] usb 5-1: USB disconnect, device number 6 [ 506.785761][ T3645] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 506.985708][ T8451] futex_wake_op: syz.0.1134 tries to shift op by -1; fix this program [ 507.105734][ T4503] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 507.295810][ T4503] usb 5-1: device descriptor read/64, error -71 [ 507.395787][ T3645] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0 [ 507.404861][ T3645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.445488][ T3645] usb 2-1: config 0 descriptor?? [ 507.715598][ T3645] kl5kusb105 2-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 508.116254][ T3645] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 508.145815][ T3645] usb 2-1: USB disconnect, device number 9 [ 508.164676][ T4503] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 508.203048][ T3645] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 508.242252][ T3645] kl5kusb105 2-1:0.0: device disconnected [ 508.371826][ T8464] loop0: detected capacity change from 0 to 64 [ 508.540593][ T8467] futex_wake_op: syz.4.1138 tries to shift op by -1; fix this program [ 508.631005][ T8470] loop2: detected capacity change from 0 to 1024 [ 510.309468][ T8487] loop0: detected capacity change from 0 to 64 [ 510.484688][ T155] hfsplus: b-tree write err: -5, ino 4 [ 510.875569][ T8495] futex_wake_op: syz.1.1146 tries to shift op by -1; fix this program [ 511.023402][ T4588] hfsplus: b-tree write err: -5, ino 4 [ 511.640474][ T8504] sch_fq: defrate 0 ignored. [ 511.801486][ T8507] loop1: detected capacity change from 0 to 64 [ 511.822688][ T8508] loop3: detected capacity change from 0 to 16 [ 511.877066][ T8511] loop0: detected capacity change from 0 to 64 [ 511.885218][ T8512] loop2: detected capacity change from 0 to 64 [ 511.901605][ T8508] erofs: (device loop3): mounted with root inode @ nid 36. [ 511.943562][ T26] audit: type=1800 audit(1729306397.986:113): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1154" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 512.546700][ T3617] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 512.775327][ T8529] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1159'. [ 513.965459][ T3620] Bluetooth: hci0: command 0x0406 tx timeout [ 514.014081][ T8534] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 514.056320][ T8534] overlayfs: missing 'lowerdir' [ 514.136499][ T8534] input: syz0 as /devices/virtual/input/input12 [ 514.566389][ T3617] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0 [ 514.587630][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.838356][ T8539] loop4: detected capacity change from 0 to 512 [ 515.044037][ T3617] usb 4-1: config 0 descriptor?? [ 515.265015][ T8539] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 515.285153][ T3617] usb 4-1: can't set config #0, error -71 [ 515.287904][ T8539] EXT4-fs (loop4): 1 truncate cleaned up [ 515.296607][ T8539] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 515.336481][ T3617] usb 4-1: USB disconnect, device number 11 [ 515.630747][ T8553] loop3: detected capacity change from 0 to 512 [ 515.701821][ T8553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.810823][ T8553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 515.946709][ T8553] EXT4-fs (loop3): 1 truncate cleaned up [ 515.952504][ T8553] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 516.257205][ T8560] loop2: detected capacity change from 0 to 512 [ 516.367006][ T8560] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 516.411565][ T8560] EXT4-fs (loop2): 1 truncate cleaned up [ 516.441550][ T8560] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 516.762859][ T8571] loop2: detected capacity change from 0 to 64 [ 516.912540][ T8573] lo speed is unknown, defaulting to 1000 [ 516.927154][ T8573] lo speed is unknown, defaulting to 1000 [ 516.933781][ T8573] lo speed is unknown, defaulting to 1000 [ 517.489218][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.517734][ T8586] team0: Port device bond0 added [ 517.544357][ T4153] lo speed is unknown, defaulting to 1000 [ 517.559339][ T8573] infiniband syz1: set active [ 517.574666][ T8573] infiniband syz1: added lo [ 517.603982][ T8586] syz.0.1176 (8586) used greatest stack depth: 18688 bytes left [ 517.658490][ T8588] loop4: detected capacity change from 0 to 512 [ 517.752147][ T8573] RDS/IB: syz1: added [ 517.789468][ T8573] smc: adding ib device syz1 with port count 1 [ 517.820348][ T8573] smc: ib device syz1 port 1 has pnetid [ 517.826491][ T4153] lo speed is unknown, defaulting to 1000 [ 517.834107][ T8573] lo speed is unknown, defaulting to 1000 [ 518.121832][ T8588] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 518.279235][ T8588] EXT4-fs (loop4): 1 truncate cleaned up [ 518.434112][ T8588] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 518.579220][ T8603] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge0 [ 518.794340][ T8614] syz.2.1182: vmalloc error: size 12884901888, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 518.811772][ T8614] CPU: 1 PID: 8614 Comm: syz.2.1182 Not tainted 5.15.168-syzkaller #0 [ 518.819945][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 518.829992][ T8614] Call Trace: [ 518.833255][ T8614] [ 518.836170][ T8614] dump_stack_lvl+0x1e3/0x2d0 [ 518.840846][ T8614] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 518.846466][ T8614] ? panic+0x860/0x860 [ 518.850526][ T8614] ? __rcu_read_unlock+0x92/0x100 [ 518.855543][ T8614] warn_alloc+0x278/0x3f0 [ 518.859861][ T8614] ? release_firmware_map_entry+0x190/0x190 [ 518.865744][ T8614] ? __vmalloc_node_range+0x91/0x8c0 [ 518.871020][ T8614] ? zone_watermark_ok_safe+0x280/0x280 [ 518.876576][ T8614] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 518.882545][ T8614] ? print_irqtrace_events+0x210/0x210 [ 518.887992][ T8614] __vmalloc_node_range+0x2b9/0x8c0 [ 518.893179][ T8614] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 518.898801][ T8614] ? lockdep_hardirqs_on+0x94/0x130 [ 518.903991][ T8614] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 518.909618][ T8614] ? memslot_rmap_alloc+0x5e/0x290 [ 518.914715][ T8614] __vmalloc+0x75/0x80 [ 518.918773][ T8614] ? memslot_rmap_alloc+0x5e/0x290 [ 518.923873][ T8614] memslot_rmap_alloc+0x5e/0x290 [ 518.928800][ T8614] kvm_arch_prepare_memory_region+0xbd/0xba0 [ 518.934765][ T8614] ? kvm_set_memslot+0x629/0x1af0 [ 518.939793][ T8614] kvm_set_memslot+0x63e/0x1af0 [ 518.944640][ T8614] ? __kvm_memslots+0x1a0/0x1a0 [ 518.949493][ T8614] __kvm_set_memory_region+0xcda/0x1060 [ 518.955035][ T8614] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 518.960393][ T8614] ? kvm_vm_ioctl_set_memory_region+0x62/0xa0 [ 518.966448][ T8614] ? __might_fault+0xb8/0x110 [ 518.971121][ T8614] ? do_vfs_ioctl+0x121/0x2b70 [ 518.975890][ T8614] ? mutex_lock_io_nested+0x60/0x60 [ 518.981090][ T8614] ? __might_fault+0xb4/0x110 [ 518.985762][ T8614] kvm_vm_ioctl_set_memory_region+0x6d/0xa0 [ 518.991660][ T8614] kvm_vm_ioctl+0x922/0xb60 [ 518.996151][ T8614] ? tomoyo_path_number_perm+0x648/0x810 [ 519.001792][ T8614] ? kvm_device_release+0x1f0/0x1f0 [ 519.006990][ T8614] ? tomoyo_path_number_perm+0x6ab/0x810 [ 519.012667][ T8614] ? __fget_files+0x413/0x480 [ 519.017351][ T8614] ? bpf_lsm_file_ioctl+0x5/0x10 [ 519.022282][ T8614] ? security_file_ioctl+0x7d/0xa0 [ 519.027383][ T8614] ? kvm_device_release+0x1f0/0x1f0 [ 519.032578][ T8614] __se_sys_ioctl+0xf1/0x160 [ 519.037170][ T8614] do_syscall_64+0x3b/0xb0 [ 519.041583][ T8614] ? clear_bhb_loop+0x15/0x70 [ 519.046245][ T8614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.052129][ T8614] RIP: 0033:0x7efefa564ff9 [ 519.056537][ T8614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.076129][ T8614] RSP: 002b:00007efef899b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.084541][ T8614] RAX: ffffffffffffffda RBX: 00007efefa71d130 RCX: 00007efefa564ff9 [ 519.092498][ T8614] RDX: 0000000020001180 RSI: 000000004020ae46 RDI: 0000000000000004 [ 519.100454][ T8614] RBP: 00007efefa5d7296 R08: 0000000000000000 R09: 0000000000000000 [ 519.108409][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.116362][ T8614] R13: 0000000000000000 R14: 00007efefa71d130 R15: 00007ffe1d4e0f08 [ 519.124334][ T8614] [ 519.129389][ T8614] Mem-Info: [ 519.132574][ T8614] active_anon:756 inactive_anon:4558 isolated_anon:0 [ 519.132574][ T8614] active_file:4753 inactive_file:45177 isolated_file:0 [ 519.132574][ T8614] unevictable:768 dirty:404 writeback:0 [ 519.132574][ T8614] slab_reclaimable:19136 slab_unreclaimable:98050 [ 519.132574][ T8614] mapped:21719 shmem:2282 pagetables:543 bounce:0 [ 519.132574][ T8614] kernel_misc_reclaimable:0 [ 519.132574][ T8614] free:1394867 free_pcp:9413 free_cma:0 [ 519.174186][ T8614] Node 0 active_anon:3016kB inactive_anon:17716kB active_file:18936kB inactive_file:180708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86876kB dirty:1612kB writeback:0kB shmem:7068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9864kB pagetables:2172kB all_unreclaimable? no [ 519.205288][ T8614] Node 1 active_anon:8kB inactive_anon:516kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 519.234211][ T8614] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.260498][ T8614] lowmem_reserve[]: 0 2533 2533 2533 2533 [ 519.266570][ T8614] Node 0 DMA32 free:1617792kB min:34736kB low:43420kB high:52104kB reserved_highatomic:0KB active_anon:3016kB inactive_anon:17816kB active_file:18936kB inactive_file:180708kB unevictable:1536kB writepending:1612kB present:3129332kB managed:2600788kB mlocked:0kB bounce:0kB free_pcp:37632kB local_pcp:17128kB free_cma:0kB [ 519.296634][ T8614] lowmem_reserve[]: 0 0 0 0 0 [ 519.301615][ T8614] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.327311][ T8614] lowmem_reserve[]: 0 0 0 0 0 [ 519.332273][ T8614] Node 1 Normal free:3946316kB min:55164kB low:68952kB high:82740kB reserved_highatomic:0KB active_anon:8kB inactive_anon:516kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.360374][ T8614] lowmem_reserve[]: 0 0 0 0 0 [ 519.365376][ T8614] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 519.378709][ T8614] Node 0 DMA32: 1492*4kB (UME) 954*8kB (UME) 224*16kB (UME) 233*32kB (UME) 179*64kB (UME) 55*128kB (UME) 33*256kB (UME) 9*512kB (UM) 5*1024kB (ME) 6*2048kB (UM) 377*4096kB (UM) = 1617792kB [ 519.398331][ T8614] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 519.410336][ T8614] Node 1 Normal: 193*4kB (UME) 41*8kB (UME) 28*16kB (UME) 176*32kB (UME) 83*64kB (UME) 29*128kB (UME) 12*256kB (UM) 6*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 957*4096kB (M) = 3946316kB [ 519.429407][ T8614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.439027][ T8614] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.448378][ T8614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.457992][ T8614] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.467521][ T8614] 52157 total pagecache pages [ 519.472258][ T8614] 0 pages in swap cache [ 519.476476][ T8614] Swap cache stats: add 630, delete 630, find 0/6 [ 519.482937][ T8614] Free swap = 124464kB [ 519.487153][ T8614] Total swap = 124996kB [ 519.491349][ T8614] 2097051 pages RAM [ 519.495197][ T8614] 0 pages HighMem/MovableOnly [ 519.499934][ T8614] 413096 pages reserved [ 519.504131][ T8614] 0 pages cma reserved [ 519.876273][ T8573] lo speed is unknown, defaulting to 1000 [ 520.038341][ T8617] loop4: detected capacity change from 0 to 1024 [ 520.096588][ T8573] lo speed is unknown, defaulting to 1000 [ 520.337862][ T8623] ALSA: seq fatal error: cannot create timer (-22) [ 520.375819][ T3617] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 520.715929][ T3617] usb 2-1: Using ep0 maxpacket: 32 [ 520.863001][ T3617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.930059][ T3617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.983192][ T3675] hfsplus: b-tree write err: -5, ino 4 [ 520.986460][ T8573] lo speed is unknown, defaulting to 1000 [ 521.021670][ T3617] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 521.059098][ T3617] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 521.257290][ T8573] lo speed is unknown, defaulting to 1000 [ 521.275940][ T3617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.295691][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.319904][ T3617] usb 2-1: Product: syz [ 521.324149][ T3617] usb 2-1: Manufacturer: syz [ 522.031698][ T3617] usb 2-1: SerialNumber: syz [ 522.055829][ T3617] usb 2-1: can't set config #1, error -71 [ 522.084957][ T3617] usb 2-1: USB disconnect, device number 10 [ 522.371620][ T8637] tmpfs: Unknown parameter 'nr_bl!' [ 522.410966][ T8637] fuse: Bad value for 'fd' [ 523.146060][ T3964] hfsplus: b-tree write err: -5, ino 4 [ 523.209948][ T8646] loop1: detected capacity change from 0 to 16 [ 523.366433][ T8646] erofs: (device loop1): mounted with root inode @ nid 36. [ 523.653430][ T8657] attempt to access beyond end of device [ 523.653430][ T8657] loop1: rw=0, want=24, limit=16 [ 527.269041][ T8690] loop2: detected capacity change from 0 to 256 [ 527.560118][ T8690] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 527.716284][ T8690] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 528.110725][ T2043] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 529.805927][ T2043] usb 5-1: Using ep0 maxpacket: 16 [ 531.101977][ T2043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 531.273968][ T2043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 531.325723][ T2043] usb 5-1: string descriptor 0 read error: -71 [ 531.341553][ T2043] usb 5-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 531.388944][ T2043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.402092][ T8719] netlink: 'syz.0.1212': attribute type 3 has an invalid length. [ 531.414660][ T2043] usb 5-1: config 0 descriptor?? [ 532.413983][ T2043] usb 5-1: can't set config #0, error -71 [ 532.521428][ T2043] usb 5-1: USB disconnect, device number 9 [ 532.616207][ T8727] tipc: Started in network mode [ 532.631666][ T8727] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 532.682214][ T8727] tipc: Enabling of bearer rejected, failed to enable media [ 532.764321][ T8727] fuse: Bad value for 'user_id' [ 533.226036][ T2043] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 533.595776][ T2043] usb 3-1: Using ep0 maxpacket: 16 [ 533.715885][ T2043] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 533.725594][ T2043] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 533.745320][ T2043] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 533.795750][ T2043] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 533.874713][ T8745] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 533.883863][ T2043] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 533.905714][ T2043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 533.913729][ T2043] usb 3-1: SerialNumber: syz [ 533.944957][ T8745] syz.3.1219[8745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.945089][ T8745] syz.3.1219[8745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.976598][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1219'. [ 533.976692][ T2043] usb-storage 3-1:1.0: USB Mass Storage device detected [ 534.026216][ T2043] usb-storage 3-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 534.075162][ T2043] scsi host1: usb-storage 3-1:1.0 [ 534.121483][ T8754] loop4: detected capacity change from 0 to 16 [ 534.122824][ T8755] 9pnet: Insufficient options for proto=fd [ 534.235152][ T8754] erofs: (device loop4): mounted with root inode @ nid 36. [ 534.259031][ T3620] usb 3-1: USB disconnect, device number 10 [ 534.308876][ T8754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 534.334312][ T8757] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 534.341491][ T8757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 534.532247][ T8757] vhci_hcd vhci_hcd.0: Device attached [ 534.615810][ T8765] Unsupported ieee802154 address type: 0 [ 535.285909][ T2043] vhci_hcd: vhci_device speed not set [ 535.375820][ T2043] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 535.451868][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 535.496778][ T8776] netlink: 'syz.4.1226': attribute type 62 has an invalid length. [ 535.541527][ T8760] vhci_hcd: connection reset by peer [ 535.566189][ T155] vhci_hcd: stop threads [ 535.585191][ T155] vhci_hcd: release socket [ 535.616604][ T155] vhci_hcd: disconnect device [ 535.664394][ T8786] loop4: detected capacity change from 0 to 128 [ 535.787343][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 535.902588][ T8786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 535.926302][ T8786] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 537.092087][ T8806] loop1: detected capacity change from 0 to 512 [ 537.201150][ T8806] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 537.292420][ T8805] loop3: detected capacity change from 0 to 4096 [ 537.319155][ T8806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1232: inode #1: comm syz.1.1232: iget: illegal inode # [ 537.363837][ T8805] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 537.375716][ T8805] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 537.385338][ T3979] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 537.388998][ T8805] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 537.454040][ T8806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1232: error while reading EA inode 1 err=-117 [ 537.512970][ T3979] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 537.598211][ T8807] loop3: detected capacity change from 0 to 256 [ 537.649125][ T3979] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 537.680792][ T8806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1232: inode #1: comm syz.1.1232: iget: illegal inode # [ 537.878436][ T8806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1232: error while reading EA inode 1 err=-117 [ 537.891414][ T8806] EXT4-fs (loop1): 1 orphan inode deleted [ 537.895960][ T8807] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 537.897253][ T8806] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 538.013867][ T3979] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 538.340404][ T3979] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 538.633027][ T3979] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 538.663472][ T3979] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 538.686338][ T3979] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 538.726973][ T3979] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 538.752800][ T3979] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 539.082274][ T8824] loop0: detected capacity change from 0 to 1024 [ 539.268765][ T8824] hfsplus: request for non-existent node 128 in B*Tree [ 539.285544][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.306287][ T8824] hfsplus: request for non-existent node 128 in B*Tree [ 539.327711][ T8828] team0: Port device bond0 added [ 539.343642][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 539.487320][ T8836] loop0: detected capacity change from 0 to 64 [ 539.647764][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 539.716126][ T8845] loop1: detected capacity change from 0 to 64 [ 539.846576][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.995445][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 540.003827][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.151305][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.156397][ T8860] loop3: detected capacity change from 0 to 512 [ 540.406989][ T8860] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 540.581297][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.751055][ T8860] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1251: inode #1: comm syz.3.1251: iget: illegal inode # [ 540.889967][ T8860] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1251: error while reading EA inode 1 err=-117 [ 540.913993][ T8860] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1251: inode #1: comm syz.3.1251: iget: illegal inode # [ 540.935882][ T8860] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1251: error while reading EA inode 1 err=-117 [ 540.965762][ T2043] vhci_hcd: vhci_device speed not set [ 540.979408][ T8860] EXT4-fs (loop3): 1 orphan inode deleted [ 541.030547][ T8860] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 541.342028][ T8882] loop0: detected capacity change from 0 to 64 [ 541.366026][ T8884] loop1: detected capacity change from 0 to 64 [ 542.179435][ T8902] loop3: detected capacity change from 0 to 64 [ 543.192035][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 543.363409][ T8917] dlm: non-version read from control device 0 [ 543.521306][ T9] device hsr_slave_0 left promiscuous mode [ 543.527762][ T9] device hsr_slave_1 left promiscuous mode [ 543.534126][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.548474][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.559699][ T9] device bridge_slave_1 left promiscuous mode [ 543.569704][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.582010][ T9] device bridge_slave_0 left promiscuous mode [ 543.592140][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.743814][ T9] device veth0_macvtap left promiscuous mode [ 543.752177][ T9] device veth1_vlan left promiscuous mode [ 543.769031][ T9] device veth0_vlan left promiscuous mode [ 543.925132][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 544.123079][ T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 544.207698][ T8957] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 544.490005][ T8959] Unsupported ieee802154 address type: 0 [ 545.275652][ T4149] Bluetooth: hci3: command 0x0406 tx timeout [ 545.344448][ T8969] loop2: detected capacity change from 0 to 64 [ 545.382394][ T9] team0 (unregistering): Port device team_slave_1 removed [ 545.617613][ T8972] loop0: detected capacity change from 0 to 2048 [ 545.830370][ T8972] Alternate GPT is invalid, using primary GPT. [ 545.837221][ T8972] loop0: p1 p2 p3 [ 546.068305][ T8951] kvm: pic: non byte read [ 546.073063][ T8951] kvm: pic: level sensitive irq not supported [ 546.073186][ T8951] kvm: pic: non byte read [ 546.088599][ T9] team0 (unregistering): Port device team_slave_0 removed [ 546.113968][ T8951] kvm: pic: non byte read [ 546.136001][ T8951] kvm: pic: non byte read [ 546.146329][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.278752][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.356934][ T8412] udevd[8412]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 546.360251][ T8413] udevd[8413]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 546.387691][ T8373] udevd[8373]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 546.546074][ T9] bond0 (unregistering): Released all slaves [ 546.665866][ T2993] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 547.066548][ T2993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209 [ 547.080846][ T2993] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 547.093252][ T2993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.113064][ T2993] usb 1-1: config 0 descriptor?? [ 547.138988][ T8980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 547.357043][ T9006] loop2: detected capacity change from 0 to 16 [ 547.534142][ T9006] erofs: (device loop2): mounted with root inode @ nid 36. [ 547.545754][ T2993] ath6kl: Failed to submit usb control message: -71 [ 547.552408][ T2993] ath6kl: unable to send the bmi data to the device: -71 [ 547.702761][ T2993] ath6kl: Unable to send get target info: -71 [ 547.779340][ T9014] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 548.381818][ T2993] ath6kl: Failed to init ath6kl core: -71 [ 548.420512][ T2993] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 548.484243][ T2993] usb 1-1: USB disconnect, device number 13 [ 548.815181][ T9041] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1274'. [ 548.883917][ T9041] device gretap0 entered promiscuous mode [ 548.911840][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 548.986423][ T9045] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1274'. [ 549.136394][ T9050] program syz.2.1276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.171795][ T9045] 0X: renamed from gretap0 [ 549.715000][ T9045] device 00X left promiscuous mode [ 549.754486][ T9045] A link change request failed with some changes committed already. Interface 00X may have been left with an inconsistent configuration, please check. [ 550.212967][ T9077] loop2: detected capacity change from 0 to 64 [ 550.245163][ T9076] loop3: detected capacity change from 0 to 128 [ 550.610183][ T9076] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 550.621046][ T9076] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 550.866045][ T9076] syz.3.1281 (pid 9076) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 550.946229][ T9076] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 551.571265][ T9107] loop0: detected capacity change from 0 to 256 [ 551.572897][ T9112] loop1: detected capacity change from 0 to 256 [ 551.595163][ T9113] loop3: detected capacity change from 0 to 128 [ 551.602141][ T9110] loop2: detected capacity change from 0 to 2048 [ 551.638688][ T9107] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 551.674788][ T9110] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 551.696276][ T26] audit: type=1804 audit(1729306437.736:114): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1283" name="/newroot/97/file1/file0" dev="loop1" ino=1048683 res=1 errno=0 [ 551.886258][ T9115] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.924749][ T9110] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 552.969245][ T9110] Remounting filesystem read-only [ 553.232455][ T9129] loop1: detected capacity change from 0 to 256 [ 553.296620][ T9130] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 553.308984][ T9129] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 553.351435][ T9129] Core dump to core aborted: cannot preserve file permissions [ 554.568846][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 554.580866][ T9140] loop3: detected capacity change from 0 to 1024 [ 554.765158][ T26] audit: type=1326 audit(1729306440.806:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.1.1292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f526aff9 code=0x0 [ 555.424923][ T9147] program syz.2.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.965085][ T26] audit: type=1800 audit(1729306442.006:116): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1291" name=".log" dev="loop3" ino=27 res=0 errno=0 [ 556.040593][ T9] hfsplus: b-tree write err: -5, ino 4 [ 556.414712][ T9157] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1294'. [ 556.493383][ T9158] loop0: detected capacity change from 0 to 64 [ 556.646048][ T9161] ubi0: attaching mtd0 [ 556.663935][ T9161] ubi0: scanning is finished [ 556.668685][ T9161] ubi0: empty MTD device detected [ 557.019676][ T9161] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 557.027396][ T9161] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 557.034745][ T9161] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 557.041863][ T9161] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 557.049441][ T9161] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 557.058904][ T9161] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 557.066983][ T9161] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3514258652 [ 557.077010][ T9161] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 557.100266][ T9162] ubi0: background thread "ubi_bgt0d" started, PID 9162 [ 558.303469][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'. [ 560.024154][ T151] block nbd2: Attempted send on invalid socket [ 560.030432][ T151] print_req_error: 40 callbacks suppressed [ 560.030445][ T151] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 560.047364][ T9193] SQUASHFS error: Failed to read block 0x0: -5 [ 560.053536][ T9193] unable to read squashfs_super_block [ 560.118145][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 560.136323][ T9191] block nbd1: shutting down sockets [ 561.938511][ T9232] loop3: detected capacity change from 0 to 64 [ 561.952188][ T9233] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1306'. [ 561.969175][ T9233] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1306'. [ 561.983467][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1306'. [ 562.252488][ T9240] program syz.0.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.877639][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.883961][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=1249 state=1 status=67 (errno 9: Bad file descriptor) [ 563.983153][ T9328] netlink: 'syz.2.1311': attribute type 30 has an invalid length. [ 564.751889][ T9327] input: syz0 as /devices/virtual/input/input13 [ 565.223536][ T3675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.334801][ T3675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.380807][ T3675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.432959][ T3675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.244573][ T3675] device hsr_slave_0 left promiscuous mode [ 566.251095][ T3675] device hsr_slave_1 left promiscuous mode [ 566.257980][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.265383][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.275427][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.284016][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.291967][ T3675] device bridge_slave_1 left promiscuous mode [ 566.298521][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.307193][ T3675] device bridge_slave_0 left promiscuous mode [ 566.313375][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.326941][ T3675] device veth1_macvtap left promiscuous mode [ 566.332966][ T3675] device veth0_macvtap left promiscuous mode [ 566.339403][ T3675] device veth1_vlan left promiscuous mode [ 566.345182][ T3675] device veth0_vlan left promiscuous mode [ 566.492608][ T3675] team0 (unregistering): Port device team_slave_1 removed [ 566.504582][ T3675] team0 (unregistering): Port device team_slave_0 removed [ 566.515081][ T3675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.533608][ T3675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.573185][ T3675] team0 (unregistering): Port device bond0 removed [ 566.594326][ T3675] bond0 (unregistering): Released all slaves [ 568.186694][ T3675] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.312113][ T3675] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.379122][ T3675] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.431099][ T3675] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.552085][ T3675] tipc: Left network mode [ 569.044592][ T3675] bond0: (slave wlan1): Releasing backup interface [ 569.213953][ T3675] device hsr_slave_0 left promiscuous mode [ 569.220850][ T3675] device hsr_slave_1 left promiscuous mode [ 569.227858][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.235266][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.243358][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.251088][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.259350][ T3675] device bridge_slave_1 left promiscuous mode [ 569.265541][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.274473][ T3675] device bridge_slave_0 left promiscuous mode [ 569.283241][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.296555][ T3675] device veth1_macvtap left promiscuous mode [ 569.302574][ T3675] device veth0_macvtap left promiscuous mode [ 569.309083][ T3675] device veth1_vlan left promiscuous mode [ 569.314866][ T3675] device veth0_vlan left promiscuous mode [ 569.468674][ T3675] team0 (unregistering): Port device team_slave_1 removed [ 569.481016][ T3675] team0 (unregistering): Port device team_slave_0 removed [ 569.493671][ T3675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.507448][ T3675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.544517][ T3675] team0 (unregistering): Port device bond0 removed [ 569.565153][ T3675] bond0 (unregistering): Released all slaves