last executing test programs: 1m41.199948928s ago: executing program 4 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x34}}, 0x800) 1m36.932769585s ago: executing program 4 (id=626): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e", 0xc1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) write$binfmt_misc(r0, &(0x7f00000000c0), 0xbf) sendmsg$sock(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="dcc1cb", 0x3}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x20, 0x0) 1m35.902752461s ago: executing program 4 (id=634): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x121081e, &(0x7f0000000040)={[{@nogrpid}, {@nolazytime}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f0000001680)) 1m35.594851116s ago: executing program 4 (id=635): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee0000, 0x100000, 0x8, 0x1, 0x6, 0x4}, {0xeeee8000, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, {0x1000, 0xffff1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x67}, {0xdddd1000, 0x10000, 0xc, 0x9, 0x2, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x10000, 0x0, 0xff, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0xc, 0x2, 0x0, 0x0, 0x7, 0x0, 0xfe, 0x0, 0x0, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140188, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x3]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x50]}, 0x2e) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x26) close(r5) lremovexattr(&(0x7f0000000240)='./file0\x00', 0x0) 1m34.649324881s ago: executing program 4 (id=636): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = epoll_create(0x10000e9) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) pipe(&(0x7f00000000c0)) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 1m34.207331928s ago: executing program 4 (id=637): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 1m33.852700274s ago: executing program 32 (id=637): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 40.252929153s ago: executing program 5 (id=982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e"], 0xfebe) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 39.710988421s ago: executing program 5 (id=989): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010f304550700000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 36.500072632s ago: executing program 5 (id=1005): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x40) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d1) 34.404064476s ago: executing program 5 (id=1008): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) dup(r0) 27.753447421s ago: executing program 3 (id=1012): socket(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xeab1, 0x3c9}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 26.359269743s ago: executing program 5 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000007c0)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendfile(r6, r5, 0x0, 0x1000) 23.147230504s ago: executing program 0 (id=1021): socket(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xeab1, 0x3c9}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 22.475994284s ago: executing program 5 (id=1023): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x21, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101201, 0xa0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 20.767401741s ago: executing program 3 (id=1025): socket(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xeab1, 0x3c9}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 20.701410743s ago: executing program 0 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 20.410221767s ago: executing program 1 (id=1027): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x2028000, 0x1000, 0x1}, 0x20) 19.104252168s ago: executing program 1 (id=1029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 16.779008434s ago: executing program 2 (id=1030): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) close(r4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 16.650620677s ago: executing program 1 (id=1031): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x220002, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7f, '\x00', r9, r6, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) 15.250845299s ago: executing program 0 (id=1032): r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbff3f6e, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x4}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000240)=""/139, &(0x7f0000000000)=0x8b) 15.028067682s ago: executing program 2 (id=1033): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8800, 0xb8b13feaa1848940) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) userfaultfd(0x801) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x11, r2, 0x100000000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x204100, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$FITHAW(r8, 0xc0045878) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0xfffffffffffffd51, 0x0, 0x0, 0xfffffee2) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000300)=@un=@abs, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000980)=""/78, 0x4e}, 0x10022) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 14.035570768s ago: executing program 3 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 10.78287469s ago: executing program 2 (id=1035): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) close(r4) openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x100) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 10.76993599s ago: executing program 1 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 9.50001047s ago: executing program 0 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 9.295072823s ago: executing program 2 (id=1037): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@noblock_validity}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000180)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076844268cb89e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800480f006800680000fa119078e0000002ac1414bb8606000000039404010000004e224e24004890780300000002000000f854c95c30e7c61935ff17a876efc34e49ba7adff051755f63198b85b6bb2b14fe6d95dede5905fe759544e3e7a1c8f1c7096db0cc1c855298f7ea7ed1"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 7.855826616s ago: executing program 1 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000007c0)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendfile(r8, r7, 0x0, 0x1000) 6.899593301s ago: executing program 3 (id=1039): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0xfea7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="bc58e52822108fe34b898a603c265d88050e7b5b5ae092039a37a48d2c820dc58f88b6c3023a8d64e0225e5b7cc8f866233e148ebe942866752fae0e2d8d8e2cbae2c541082e00c28f3ff3688e285d634b039ed391fa5173cecca8e15b2bb59ade96188df6f91bb76e2d0239fe4bac0a14e8d806ccbb9c57", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) 5.858901127s ago: executing program 33 (id=1023): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x21, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101201, 0xa0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5.795229249s ago: executing program 2 (id=1041): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x8, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x38}}, 0x0) 2.751927487s ago: executing program 0 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, 0x0, 0x40084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) dup(0xffffffffffffffff) syz_socket_connect_nvme_tcp() syz_clone(0x680d1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) ioprio_get$uid(0x3, 0x0) 2.611309269s ago: executing program 3 (id=1043): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xe66}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pselect6(0x2a, 0x0, 0x0, 0x0, 0x0, 0x0) 2.60824657s ago: executing program 1 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000040000e9ca02000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r7 = socket(0x1e, 0x805, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) close(r7) 2.53842117s ago: executing program 2 (id=1046): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{0x0}], 0x1, 0xfff, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000b3087b0f09804be301d8e6f87492cbc8c1ba72e4e1620dd7633f439bd2019e5c9821a877842d09347add5b0b9f43dfaf2e23a9a3fd9be83fa63d8c8e88600ff63d95b38f5d94a2a6e6d0f5f3f3d96f65090b9e3a67e7c738b24f4ee621f6fccd2dde3d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}}, 0x24}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 922.376356ms ago: executing program 0 (id=1047): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 3 (id=1048): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0xfffffffd, @loopback, 0x8}, 0x20) kernel console output (not intermixed with test programs): ected capacity change from 0 to 512 [ 355.285446][ T5636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 355.336311][ T5642] loop1: detected capacity change from 0 to 2048 [ 355.351867][ T5636] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.454315][ T5642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 355.629172][ T26] audit: type=1800 audit(1743618905.037:3): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.315" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 355.648623][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.847060][ T5660] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 355.857812][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 355.977927][ T5665] loop2: detected capacity change from 0 to 512 [ 355.993325][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 356.406544][ T5665] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.321: inode #1: comm syz.2.321: iget: illegal inode # [ 356.567240][ T5665] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.321: error while reading EA inode 1 err=-117 [ 356.661297][ T5665] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 356.726208][ T5665] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.321: inode #1: comm syz.2.321: iget: illegal inode # [ 356.775146][ T5665] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.321: error while reading EA inode 1 err=-117 [ 356.844540][ T5676] loop3: detected capacity change from 0 to 512 [ 356.879055][ T5665] EXT4-fs (loop2): 1 orphan inode deleted [ 356.891760][ T5665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 356.917917][ T5676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.080826][ T5676] EXT4-fs error (device loop3): __ext4_iget:5055: inode #2: block 3072: comm syz.3.323: invalid block [ 357.152762][ T5676] EXT4-fs (loop3): get root inode failed [ 357.161695][ T5676] EXT4-fs (loop3): mount failed [ 357.246324][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 357.850754][ T5674] loop4: detected capacity change from 0 to 32768 [ 357.958894][ T5674] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 358.275468][ T5674] (syz.4.322,5674,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 358.442048][ T5674] (syz.4.322,5674,1):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 359.330626][ T5674] (syz.4.322,5674,1):ocfs2_unlink:990 ERROR: status = -5 [ 359.394695][ T5674] (syz.4.322,5674,1):ocfs2_unlink:1042 ERROR: status = -5 [ 359.772928][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 360.438024][ T5709] loop2: detected capacity change from 0 to 128 [ 360.647311][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 360.673714][ T5709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 360.782203][ T5709] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.598876][ T5727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'. [ 361.692768][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 362.771342][ T5736] loop1: detected capacity change from 0 to 128 [ 362.791715][ T5736] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 362.815937][ T5736] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 362.912481][ T5738] netlink: 'syz.0.342': attribute type 3 has an invalid length. [ 362.920187][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 363.287002][ T5746] loop1: detected capacity change from 0 to 64 [ 363.403285][ T5724] loop4: detected capacity change from 0 to 32768 [ 363.473701][ T5724] ERROR: (device loop4): diRead: i_ino != di_number [ 363.473701][ T5724] [ 363.500246][ T5724] ERROR: (device loop4): remounting filesystem as read-only [ 364.708243][ T5733] loop3: detected capacity change from 0 to 32768 [ 364.744576][ T5733] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.340 (5733) [ 364.930023][ T5733] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 364.943372][ T5733] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 365.153068][ T5733] BTRFS info (device loop3): using free space tree [ 365.747513][ T5733] BTRFS error (device loop3): open_ctree failed: -12 [ 365.798431][ T5744] loop2: detected capacity change from 0 to 32768 [ 365.909373][ T5744] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.345 (5744) [ 366.212336][ T5744] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 366.231817][ T5744] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 366.248842][ T5744] BTRFS info (device loop2): using free space tree [ 366.906196][ T5744] BTRFS error (device loop2): open_ctree failed: -12 [ 369.265623][ T4273] Bluetooth: hci4: link tx timeout [ 369.271171][ T4273] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 369.455648][ T5827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.359'. [ 369.577095][ T5827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.359'. [ 370.525610][ T5829] loop2: detected capacity change from 0 to 131072 [ 370.579817][ T5829] F2FS-fs (loop2): Unrecognized mount option "noquËnl¬­ƒ [ 370.579817][ T5829] {¨âïta" or missing value [ 370.781862][ T4547] I/O error, dev loop2, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 372.088938][ T5832] loop0: detected capacity change from 0 to 32768 [ 373.650739][ T5862] loop0: detected capacity change from 0 to 1024 [ 373.650755][ T5864] loop3: detected capacity change from 0 to 190 [ 373.652963][ T5864] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 373.757895][ T5862] hfsplus: bad catalog entry type [ 373.758656][ T5864] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 373.849241][ T5864] ntfs: (device loop3): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 373.899813][ T5864] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 373.920033][ T5864] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 373.936290][ T4699] hfsplus: b-tree write err: -5, ino 4 [ 373.967059][ T5864] ntfs: volume version 3.1. [ 373.976434][ T5864] ntfs: (device loop3): load_system_files(): Volume is dirty. Will not be able to remount read-write. Run chkdsk and mount in Windows. [ 374.019360][ T5864] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is an extent inode! [ 374.041946][ T5864] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 374.118546][ T5864] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 374.147008][ T5864] ntfs: (device loop3): ntfs_read_locked_inode(): Index block size (65536) > PAGE_SIZE (4096) is not supported. Sorry. [ 374.191187][ T5878] loop0: detected capacity change from 0 to 256 [ 374.295055][ T5878] exfat: Deprecated parameter 'utf8' [ 374.300436][ T5878] exfat: Deprecated parameter 'utf8' [ 374.325502][ T5878] exfat: Deprecated parameter 'utf8' [ 376.492811][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 376.642252][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 376.642377][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 376.700386][ T5878] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 376.820054][ T5888] loop1: detected capacity change from 0 to 8192 [ 376.847991][ T5888] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 377.091703][ T5888] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 377.152068][ T5888] REISERFS (device loop1): using ordered data mode [ 377.158718][ T5888] reiserfs: using flush barriers [ 377.173506][ T5888] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 377.208670][ T5888] REISERFS (device loop1): checking transaction log (loop1) [ 377.874085][ T5902] loop0: detected capacity change from 0 to 1024 [ 377.948096][ T5902] EXT4-fs: Ignoring removed nobh option [ 377.986578][ T5902] EXT4-fs: Ignoring removed bh option [ 378.025314][ T5902] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 378.104574][ T5906] (unnamed net_device) (uninitialized): option ad_select: invalid value (255) [ 378.116929][ T5902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 378.171931][ T5910] loop2: detected capacity change from 0 to 256 [ 378.312275][ T5910] FAT-fs (loop2): Directory bread(block 64) failed [ 378.340707][ T5910] FAT-fs (loop2): Directory bread(block 65) failed [ 378.359965][ T5888] REISERFS (device loop1): Using tea hash to sort names [ 378.370009][ T5910] FAT-fs (loop2): Directory bread(block 66) failed [ 378.395568][ T5888] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 378.419142][ T5910] FAT-fs (loop2): Directory bread(block 67) failed [ 378.429852][ T5910] FAT-fs (loop2): Directory bread(block 68) failed [ 378.449857][ T5910] FAT-fs (loop2): Directory bread(block 69) failed [ 378.482381][ T5910] FAT-fs (loop2): Directory bread(block 70) failed [ 378.541788][ T5910] FAT-fs (loop2): Directory bread(block 71) failed [ 378.559445][ T5910] FAT-fs (loop2): Directory bread(block 72) failed [ 378.580350][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.587274][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.626388][ T5910] FAT-fs (loop2): Directory bread(block 73) failed [ 380.359195][ T5913] loop3: detected capacity change from 0 to 40427 [ 380.472225][ T5913] F2FS-fs (loop3): invalid crc value [ 380.523831][ T5913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 380.737802][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 380.764184][ T5930] loop2: detected capacity change from 0 to 256 [ 382.470839][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 382.519155][ T5949] device lo entered promiscuous mode [ 382.624608][ T5949] device lo left promiscuous mode [ 382.649987][ T5950] loop2: detected capacity change from 0 to 4096 [ 382.998271][ T5950] ntfs: volume version 3.1. [ 383.655189][ T5962] loop3: detected capacity change from 0 to 256 [ 383.697004][ T5950] __ntfs_error: 3 callbacks suppressed [ 383.697026][ T5950] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 383.724509][ T5962] exfat: Deprecated parameter 'utf8' [ 383.738240][ T5963] loop4: detected capacity change from 0 to 2048 [ 383.753452][ T5950] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 383.757212][ T5962] exfat: Deprecated parameter 'namecase' [ 383.786140][ T5966] loop0: detected capacity change from 0 to 2048 [ 383.798772][ T5963] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 383.816756][ T5962] exfat: Deprecated parameter 'namecase' [ 383.817099][ T5963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.822678][ T5962] exfat: Deprecated parameter 'utf8' [ 383.850263][ T5962] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 383.894212][ T5968] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.001744][ T4491] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 384.216411][ T4491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.330178][ T5978] ALSA: seq fatal error: cannot create timer (-22) [ 384.977151][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'. [ 385.000475][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'. [ 385.267657][ T5973] loop4: detected capacity change from 0 to 131072 [ 385.308249][ T4491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.310075][ T5973] F2FS-fs (loop4): Unrecognized mount option "noquËnl¬­ƒ [ 385.310075][ T5973] {¨âïta" or missing value [ 385.332456][ T4491] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.485382][ T4491] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.494799][ T4491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.874547][ T4491] usb 2-1: config 0 descriptor?? [ 385.921719][ T4547] I/O error, dev loop4, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 386.340692][ T5998] loop4: detected capacity change from 0 to 128 [ 386.381889][ T4491] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 386.417939][ T5998] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 386.462846][ T4491] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 386.597220][ T4491] usb 2-1: USB disconnect, device number 6 [ 386.670727][ T6001] loop2: detected capacity change from 0 to 8192 [ 386.768213][ T6001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 386.804506][ T6001] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 386.857542][ T6001] REISERFS (device loop2): using ordered data mode [ 386.872714][ T6001] reiserfs: using flush barriers [ 386.956767][ T6006] xt_NFQUEUE: number of queues (65532) out of range (got 65786) [ 387.081413][ T6001] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 387.519521][ T6001] REISERFS (device loop2): checking transaction log (loop2) [ 387.574856][ T6001] REISERFS (device loop2): Using r5 hash to sort names [ 387.631115][ T6001] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 391.088834][ T26] audit: type=1326 audit(1743618940.497:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f171618d169 code=0x0 [ 391.509388][ T6045] tipc: Started in network mode [ 391.515145][ T6045] tipc: Node identity ffffffff, cluster identity 5 [ 391.522008][ T6045] tipc: Node number set to 4294967295 [ 394.132533][ T6060] loop4: detected capacity change from 0 to 4096 [ 394.259195][ T6066] block nbd1: NBD_DISCONNECT [ 394.572680][ T6068] netlink: 'syz.4.438': attribute type 29 has an invalid length. [ 394.581091][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 394.592219][ T6068] netlink: 'syz.4.438': attribute type 29 has an invalid length. [ 394.600053][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 395.271413][ T6074] loop0: detected capacity change from 0 to 1024 [ 395.294509][ T6076] loop3: detected capacity change from 0 to 1024 [ 395.322377][ T6074] EXT4-fs: Invalid want_extra_isize 11 [ 395.333094][ T6076] EXT4-fs: Invalid want_extra_isize 11 [ 395.346814][ T6062] loop2: detected capacity change from 0 to 32768 [ 395.368947][ T6062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.439 (6062) [ 396.719489][ T6076] netlink: 'syz.3.445': attribute type 16 has an invalid length. [ 396.727402][ T6076] netlink: 'syz.3.445': attribute type 17 has an invalid length. [ 396.750296][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.758013][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.893707][ T6062] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 397.472300][ T6062] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 397.507112][ T6062] BTRFS info (device loop2): using free space tree [ 397.549249][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.564787][ T6082] netlink: 'syz.0.444': attribute type 16 has an invalid length. [ 397.572705][ T6082] netlink: 'syz.0.444': attribute type 17 has an invalid length. [ 397.587708][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.595196][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.889250][ T6082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.924751][ T6062] BTRFS error (device loop2): open_ctree failed: -12 [ 398.913154][ T6124] loop4: detected capacity change from 0 to 128 [ 398.930784][ T6124] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 400.129742][ T6136] loop0: detected capacity change from 0 to 1024 [ 400.186907][ T6136] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 401.035965][ T6136] EXT4-fs (loop0): invalid journal inode [ 401.085175][ T6136] EXT4-fs (loop0): can't get journal size [ 401.122813][ T6136] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 402.364479][ T4286] Bluetooth: hci4: link tx timeout [ 402.369866][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 402.377852][ T4286] Bluetooth: hci4: link tx timeout [ 402.383087][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.464252][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 402.688491][ T6131] loop4: detected capacity change from 0 to 32768 [ 402.714261][ T6131] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.458 (6131) [ 402.803216][ T6131] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 402.857291][ T6131] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 402.903898][ T6131] BTRFS info (device loop4): using free space tree [ 403.406445][ T6131] BTRFS error (device loop4): open_ctree failed: -12 [ 404.402242][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 404.625814][ T6187] loop3: detected capacity change from 0 to 8192 [ 404.916332][ T6187] loop3: p1 p2 < > p3 p4 < p5 > [ 405.053671][ T6187] loop3: p1 size 108986237 extends beyond EOD, truncated [ 405.403690][ T6187] loop3: p3 size 131072 extends beyond EOD, truncated [ 405.462063][ T6187] loop3: p5 size 108986237 extends beyond EOD, truncated [ 405.891156][ T6192] loop2: detected capacity change from 0 to 8192 [ 405.948106][ T6192] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 405.976414][ T6192] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 405.986203][ T6192] REISERFS (device loop2): using ordered data mode [ 405.993749][ T6192] reiserfs: using flush barriers [ 406.009197][ T6192] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 406.044263][ T6192] REISERFS (device loop2): checking transaction log (loop2) [ 406.079423][ T6192] REISERFS (device loop2): Using r5 hash to sort names [ 406.121010][ T6192] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 406.239724][ T6184] loop0: detected capacity change from 0 to 32768 [ 406.486338][ T6184] XFS (loop0): Mounting V5 Filesystem [ 406.547899][ T6194] loop4: detected capacity change from 0 to 32768 [ 406.571498][ T6194] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.470 (6194) [ 406.609708][ T6184] XFS (loop0): Ending clean mount [ 406.619288][ T6194] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 406.630484][ T6194] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 406.640052][ T6194] BTRFS info (device loop4): doing ref verification [ 406.646246][ T6219] loop2: detected capacity change from 0 to 128 [ 406.646932][ T6194] BTRFS info (device loop4): using free space tree [ 406.670284][ T6184] XFS (loop0): Quotacheck needed: Please wait. [ 406.670340][ T6221] loop1: detected capacity change from 0 to 1024 [ 406.684201][ T6221] EXT4-fs: Ignoring removed nobh option [ 406.689809][ T6221] EXT4-fs: Ignoring removed bh option [ 406.696351][ T6221] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 406.726206][ T6219] EXT4-fs (loop2): Test dummy encryption mode enabled [ 406.794027][ T6184] XFS (loop0): Quotacheck: Done. [ 406.820717][ T6219] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 406.830060][ T6221] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.859351][ T6219] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.881907][ T6219] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 31 (only 1 groups) [ 406.979158][ T4271] XFS (loop0): Unmounting Filesystem [ 407.005443][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 407.014353][ T6194] BTRFS info (device loop4): enabling ssd optimizations [ 407.312749][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 407.376375][ T6194] BTRFS error (device loop4): target device is invalid! [ 407.539195][ T4284] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 407.687522][ T6250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 407.698003][ T6250] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 408.275920][ T6252] loop1: detected capacity change from 0 to 1024 [ 408.324507][ T6252] EXT4-fs: Ignoring removed nobh option [ 408.330130][ T6252] EXT4-fs: Ignoring removed bh option [ 408.371940][ T6252] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.520837][ T6252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 408.599265][ T6260] ax25_connect(): syz.0.482 uses autobind, please contact jreuter@yaina.de [ 408.834435][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 408.938477][ T6246] loop2: detected capacity change from 0 to 32768 [ 408.963489][ T6246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.483 (6246) [ 409.135011][ T6269] loop4: detected capacity change from 0 to 512 [ 409.142323][ T6269] EXT4-fs: Ignoring removed nobh option [ 409.147924][ T6269] EXT4-fs: Ignoring removed nobh option [ 409.154267][ T6269] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 409.305963][ T6246] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 409.310881][ T6269] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 409.316280][ T6246] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 409.316353][ T6246] BTRFS info (device loop2): enabling auto defrag [ 409.364455][ T6269] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.486: invalid indirect mapped block 2683928664 (level 1) [ 409.514795][ T6246] BTRFS info (device loop2): use zlib compression, level 3 [ 409.657622][ T6246] BTRFS info (device loop2): max_inline at 0 [ 409.675624][ T6269] EXT4-fs (loop4): 1 truncate cleaned up [ 409.764369][ T6246] BTRFS info (device loop2): force clearing of disk cache [ 409.778865][ T6269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.977944][ T6246] BTRFS info (device loop2): turning on sync discard [ 410.025500][ T6246] BTRFS info (device loop2): disabling free space tree [ 410.302955][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 410.913410][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 411.282677][ T6246] BTRFS error (device loop2): open_ctree failed: -12 [ 411.521067][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.605452][ T6296] device bridge_slave_1 left promiscuous mode [ 411.622387][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.292101][ T4357] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 412.620681][ T6283] loop1: detected capacity change from 0 to 40427 [ 412.679535][ T6313] loop4: detected capacity change from 0 to 512 [ 412.700664][ T6283] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 412.711696][ T6283] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 412.725149][ T6283] F2FS-fs (loop1): invalid crc value [ 412.744257][ T6283] F2FS-fs (loop1): Found nat_bits in checkpoint [ 412.796989][ T6313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 412.812040][ T6313] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.975190][ T6283] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 413.040241][ T6283] F2FS-fs (loop1): Start checkpoint disabled! [ 413.105566][ T6283] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 413.112900][ T6283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 413.119373][ T6320] loop2: detected capacity change from 0 to 2048 [ 413.196040][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 413.209029][ T6322] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.329841][ T26] audit: type=1804 audit(1743618962.737:5): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.501" name="/newroot/98/file2/file1" dev="loop2" ino=15 res=1 errno=0 [ 413.352508][ T6322] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 413.403407][ T6322] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 413.444024][ T6322] Remounting filesystem read-only [ 413.680028][ T6308] loop0: detected capacity change from 0 to 32768 [ 413.687999][ T4276] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 413.772549][ T6308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.500 (6308) [ 414.568081][ T6308] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 414.597498][ T6333] loop3: detected capacity change from 0 to 1024 [ 414.628384][ T6308] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 414.674164][ T6308] BTRFS info (device loop0): enabling auto defrag [ 414.680704][ T6308] BTRFS info (device loop0): use no compression [ 414.687404][ T6333] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 414.693161][ T6333] EXT4-fs (loop3): invalid journal inode [ 414.699366][ T6308] BTRFS info (device loop0): force clearing of disk cache [ 414.712396][ T6308] BTRFS info (device loop0): max_inline at 4096 [ 414.718681][ T6308] BTRFS info (device loop0): disabling free space tree [ 414.735677][ T6333] EXT4-fs (loop3): can't get journal size [ 414.763424][ T6333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 415.141894][ T6308] BTRFS info (device loop0): enabling ssd optimizations [ 415.233914][ T6330] loop1: detected capacity change from 0 to 32768 [ 415.254530][ T6330] XFS: ikeep mount option is deprecated. [ 415.265141][ T6308] BTRFS info (device loop0): rebuilding free space tree [ 415.306104][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 415.399399][ T6308] BTRFS info (device loop0): disabling free space tree [ 415.419206][ T6308] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 415.513673][ T6308] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 415.601059][ T6330] XFS (loop1): Mounting V5 Filesystem [ 415.610717][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.509'. [ 415.694540][ T6330] XFS (loop1): Ending clean mount [ 415.736426][ T6330] XFS (loop1): Quotacheck needed: Please wait. [ 415.784308][ T6376] loop3: detected capacity change from 0 to 8192 [ 415.807485][ T4271] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.843602][ T6376] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 415.883373][ T6376] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 415.902885][ T6330] XFS (loop1): Quotacheck: Done. [ 415.950402][ T6376] REISERFS (device loop3): using ordered data mode [ 415.958298][ T6376] reiserfs: using flush barriers [ 415.966593][ T6376] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 415.999359][ T6376] REISERFS (device loop3): checking transaction log (loop3) [ 416.158521][ T6376] REISERFS (device loop3): Using tea hash to sort names [ 416.169142][ T6376] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 416.343390][ T4272] XFS (loop1): Unmounting Filesystem [ 417.036845][ T6403] loop1: detected capacity change from 0 to 1024 [ 417.049729][ T6403] EXT4-fs: Invalid want_extra_isize 11 [ 417.126313][ T4547] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.541864][ T6411] netlink: 'syz.1.515': attribute type 16 has an invalid length. [ 418.551023][ T6411] netlink: 'syz.1.515': attribute type 17 has an invalid length. [ 418.574561][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.582282][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.638218][ T4273] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 419.647353][ T4273] Bluetooth: hci4: Injecting HCI hardware error event [ 419.657026][ T4286] Bluetooth: hci4: hardware error 0x00 [ 419.669357][ T6411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.725186][ T6433] loop0: detected capacity change from 0 to 512 [ 421.142864][ T6433] EXT4-fs (loop0): 1 orphan inode deleted [ 421.148813][ T6433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 421.169496][ T6433] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.250627][ T56] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 422.251399][ T4286] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 422.300321][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:4: Failed to release dquot type 1 [ 422.594480][ T6419] loop3: detected capacity change from 0 to 40427 [ 422.729963][ T6425] loop2: detected capacity change from 0 to 32768 [ 422.738584][ T6419] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 422.765108][ T6419] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 422.778063][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 422.812069][ T6419] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 422.835882][ T6425] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 422.869928][ T6455] loop4: detected capacity change from 0 to 8 [ 422.886735][ T6419] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 423.022051][ T6419] F2FS-fs (loop3): invalid crc value [ 423.041299][ T6419] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 423.058561][ T6458] netlink: 216 bytes leftover after parsing attributes in process `syz.0.534'. [ 423.171306][ T4276] ocfs2: Unmounting device (7,2) on (node local) [ 423.250814][ T26] audit: type=1800 audit(1743618972.657:6): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.533" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 423.561661][ T4716] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 423.724095][ T6471] loop2: detected capacity change from 0 to 512 [ 423.771076][ T4716] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 423.804272][ T4716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.844657][ T6471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 423.898926][ T4716] usb 1-1: config 0 descriptor?? [ 423.923586][ T6471] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.966056][ T4716] gspca_main: tv8532-2.14.0 probing 0545:808b [ 424.188228][ T4716] usb 1-1: USB disconnect, device number 2 [ 424.365044][ T6492] kernel read not supported for file /]--.\- (pid: 6492 comm: syz.4.542) [ 424.436480][ T26] audit: type=1800 audit(1743618973.837:7): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.542" name="]--.\-" dev="mqueue" ino=39134 res=0 errno=0 [ 424.438335][ T6496] 9pnet_fd: Insufficient options for proto=fd [ 424.473295][ T6495] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 424.888603][ T6503] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 425.010196][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 425.023624][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.300834][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.376762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 425.401744][ T4484] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 425.581661][ T4484] usb 2-1: Using ep0 maxpacket: 32 [ 425.603709][ T4484] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 425.623092][ T4484] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.683695][ T4484] usb 2-1: config 0 has no interface number 0 [ 425.708498][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 425.720153][ T4484] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 425.748973][ T6512] device syz_tun left promiscuous mode [ 425.758204][ T4484] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.781786][ T6512] bridge0: port 3(syz_tun) entered disabled state [ 425.811037][ T4484] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 425.863205][ T4484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.891784][ T4484] usb 2-1: Product: syz [ 425.906244][ T4484] usb 2-1: Manufacturer: syz [ 425.910947][ T4484] usb 2-1: SerialNumber: syz [ 425.957525][ T4484] usb 2-1: config 0 descriptor?? [ 425.990337][ T6513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.011488][ T6512] device bridge_slave_1 left promiscuous mode [ 426.022426][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 426.038489][ T4484] usb 2-1: invalid MIDI in EP 0 [ 426.046490][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.129528][ T6540] ptrace attach of "./syz-executor exec"[4284] was attempted by "./syz-executor exec"[6540] [ 426.226770][ T4484] snd-usb-audio: probe of 2-1:0.16 failed with error -22 [ 426.295893][ T6512] device bridge_slave_0 left promiscuous mode [ 426.312027][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.378320][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.864762][ T6558] loop3: detected capacity change from 0 to 1024 [ 427.018455][ T6558] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.558: Invalid block bitmap block 0 in block_group 0 [ 427.041137][ T6558] Quota error (device loop3): write_blk: dquota write failed [ 427.049351][ T6558] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 427.059825][ T6558] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.558: Failed to acquire dquot type 0 [ 427.080644][ T6558] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.558: Freeing blocks not in datazone - block = 0, count = 4096 [ 427.098751][ T6558] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.558: Invalid inode bitmap blk 0 in block_group 0 [ 427.116834][ T6558] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 427.127156][ T4382] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 427.137526][ T6558] EXT4-fs (loop3): 1 orphan inode deleted [ 427.143597][ T6558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 427.401121][ T4382] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:13: Failed to release dquot type 0 [ 428.072383][ T6560] loop0: detected capacity change from 0 to 2048 [ 428.125948][ T6563] loop2: detected capacity change from 0 to 512 [ 428.239565][ T6563] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.276130][ T6566] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.346783][ T6563] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 428.531983][ T6563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 428.581224][ T6563] System zones: 1-12 [ 428.641901][ T6563] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.560: corrupted in-inode xattr [ 428.654530][ T4621] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 428.668735][ T6563] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.560: couldn't read orphan inode 15 (err -117) [ 428.716077][ T6563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 428.873692][ T4621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.921699][ T4621] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.994804][ T4621] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.052034][ T4621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.072039][ T6543] netlink: 132 bytes leftover after parsing attributes in process `syz.4.556'. [ 429.196771][ T4621] usb 1-1: Product: syz [ 429.201008][ T4621] usb 1-1: Manufacturer: syz [ 429.205732][ T4621] usb 1-1: SerialNumber: syz [ 429.229255][ T4715] usb 2-1: USB disconnect, device number 7 [ 429.324742][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 429.333609][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 429.450514][ T4621] usb 1-1: 0:2 : does not exist [ 429.504118][ T4621] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 429.657883][ T4621] usb 1-1: USB disconnect, device number 3 [ 429.837978][ T6594] loop3: detected capacity change from 0 to 2048 [ 429.856287][ T6594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.931842][ T4484] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 429.934455][ T4547] udevd[4547]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.981790][ T4492] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 430.144294][ T4484] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 430.160114][ T4484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.171829][ T4492] usb 5-1: Using ep0 maxpacket: 32 [ 430.178972][ T4492] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 430.204685][ T4492] usb 5-1: config 0 has no interface number 0 [ 430.212412][ T4484] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 430.233801][ T4484] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 430.242699][ T4492] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 430.262017][ T4492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.270699][ T4484] usb 2-1: Manufacturer: syz [ 430.286373][ T4492] usb 5-1: Product: syz [ 430.290608][ T4492] usb 5-1: Manufacturer: syz [ 430.307654][ T4484] usb 2-1: config 0 descriptor?? [ 430.326197][ T4492] usb 5-1: SerialNumber: syz [ 430.349053][ T4492] usb 5-1: config 0 descriptor?? [ 430.383714][ T4492] smsc95xx v2.0.0 [ 430.521839][ T4484] rc_core: IR keymap rc-hauppauge not found [ 430.527888][ T4484] Registered IR keymap rc-empty [ 430.544764][ T4484] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 430.567304][ T4484] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 430.618036][ T4484] usb 2-1: USB disconnect, device number 8 [ 431.079373][ T4382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.293717][ T4382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.489776][ T4382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.605835][ T4492] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 431.637142][ T4492] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 431.693735][ T4492] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 431.713854][ T4382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.746726][ T4492] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 431.796618][ T4492] usb 5-1: USB disconnect, device number 2 [ 432.283009][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.293922][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.313923][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.334462][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.343805][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 432.352442][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.573530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 432.582406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 432.590612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 432.880683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 433.085512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 433.265619][ T6647] loop1: detected capacity change from 0 to 32768 [ 433.347049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.426643][ T6647] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 433.792812][ T6687] loop0: detected capacity change from 0 to 512 [ 433.827530][ T6687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 433.897281][ T6690] loop4: detected capacity change from 0 to 256 [ 433.951822][ T6690] exfat: Bad value for 'gid' [ 433.975675][ T6687] EXT4-fs (loop0): 1 truncate cleaned up [ 433.981392][ T6687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 434.114477][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 434.126347][ T6655] chnl_net:caif_netlink_parms(): no params data found [ 434.320461][ T26] audit: type=1800 audit(1743618983.727:8): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.592" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 434.401786][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 434.502336][ T6703] loop2: detected capacity change from 0 to 64 [ 434.715774][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 434.940190][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.952384][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.981858][ T6655] device bridge_slave_0 entered promiscuous mode [ 435.000717][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 435.250711][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.260281][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.277817][ T6655] device bridge_slave_1 entered promiscuous mode [ 435.315133][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 435.423210][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.541879][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 435.550615][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 435.617089][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 435.652788][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.660774][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.714709][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 435.781199][ T22] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 435.794708][ T4382] device hsr_slave_0 left promiscuous mode [ 435.811783][ T22] usb 2-1: Product: syz [ 435.816553][ T4382] device hsr_slave_1 left promiscuous mode [ 435.824713][ T22] usb 2-1: Manufacturer: syz [ 435.829459][ T22] usb 2-1: SerialNumber: syz [ 435.864647][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.886327][ T22] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 435.898575][ T4382] device bridge_slave_1 left promiscuous mode [ 435.922800][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.977612][ T4382] device bridge_slave_0 left promiscuous mode [ 436.010392][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.078050][ T22] usb 2-1: USB disconnect, device number 9 [ 436.119872][ T22] appletouch 2-1:1.0: input: appletouch disconnected [ 436.180522][ T4382] device veth1_macvtap left promiscuous mode [ 436.196058][ T4382] device veth0_macvtap left promiscuous mode [ 436.220911][ T4382] device veth1_vlan left promiscuous mode [ 436.240731][ T4382] device veth0_vlan left promiscuous mode [ 436.489910][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 437.090789][ T6765] loop1: detected capacity change from 0 to 24 [ 437.107652][ T6765] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 437.154712][ T6765] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 437.337292][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 437.468149][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 437.575030][ T6773] loop0: detected capacity change from 0 to 4096 [ 437.582586][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.602333][ T6773] EXT4-fs error (device loop0): ext4_quota_enable:6982: comm syz.0.619: Bad quota inum: 1, type: 0 [ 437.619436][ T6773] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 437.637803][ T6773] EXT4-fs (loop0): mount failed [ 437.688933][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.371272][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 438.497482][ T6788] loop0: detected capacity change from 0 to 1024 [ 438.519432][ T6788] EXT4-fs: Invalid want_extra_isize 11 [ 438.561682][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 439.821278][ T4382] bond0 (unregistering): Released all slaves [ 439.916472][ T6655] team0: Port device team_slave_0 added [ 439.940368][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 439.952613][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.969158][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.978274][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.003807][ T6756] device bridge_slave_0 left promiscuous mode [ 440.005834][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.012597][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.016647][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.050601][ T6756] device bridge_slave_1 left promiscuous mode [ 440.056973][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.067731][ T6756] bond0: (slave bond_slave_0): Releasing backup interface [ 440.088901][ T6756] bond0: (slave bond_slave_1): Releasing backup interface [ 440.135925][ T6756] team0: Port device team_slave_0 removed [ 440.159329][ T6756] team0: Port device team_slave_1 removed [ 440.174428][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.182031][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.190533][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.198344][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.271982][ T6794] netlink: 'syz.0.625': attribute type 16 has an invalid length. [ 440.279946][ T6794] netlink: 'syz.0.625': attribute type 17 has an invalid length. [ 440.292685][ T6794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 440.306642][ T6794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.336387][ T6655] team0: Port device team_slave_1 added [ 440.573721][ T6804] device veth0_to_batadv entered promiscuous mode [ 440.590467][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.621298][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.649491][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 440.744556][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.768683][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.791814][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.831984][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.914827][ T6655] device hsr_slave_0 entered promiscuous mode [ 440.948927][ T6655] device hsr_slave_1 entered promiscuous mode [ 440.957016][ T6655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.987606][ T6655] Cannot create hsr debugfs directory [ 441.101730][ T4492] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 441.126022][ T6820] loop4: detected capacity change from 0 to 512 [ 441.165637][ T6820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 441.193882][ T6820] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.291761][ T4492] usb 1-1: Using ep0 maxpacket: 8 [ 441.303979][ T4492] usb 1-1: config index 0 descriptor too short (expected 255, got 36) [ 441.318108][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 441.330682][ T4492] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.352397][ T4492] usb 1-1: config 0 has no interfaces? [ 441.400839][ T4492] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 441.419596][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 441.442290][ T4492] usb 1-1: Product: syz [ 441.446906][ T4492] usb 1-1: SerialNumber: syz [ 441.466468][ T4492] usb 1-1: config 0 descriptor?? [ 441.484139][ T6830] loop4: detected capacity change from 0 to 512 [ 441.533429][ T6830] EXT4-fs (loop4): orphan cleanup on readonly fs [ 441.556200][ T6830] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 441.598224][ T6830] Quota error (device loop4): write_blk: dquota write failed [ 441.610162][ T6830] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 441.641896][ T6830] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm kfree: Failed to acquire dquot type 1 [ 441.664343][ T6830] EXT4-fs (loop4): 1 truncate cleaned up [ 441.670627][ T6830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 441.749459][ T6830] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 441.800395][ T6830] Quota error (device loop4): write_blk: dquota write failed [ 441.810324][ T6830] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 441.821204][ T6830] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm kfree: Failed to acquire dquot type 1 [ 441.840045][ T6830] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 441.891788][ T6839] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.635: deleted inode referenced: 12 [ 441.979910][ T6830] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm kfree: deleted inode referenced: 12 [ 442.043966][ T6655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 442.066505][ T6655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 442.080725][ T6655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 442.092728][ T6655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 442.215477][ T4284] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 442.242518][ T4287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 442.251520][ T4287] Bluetooth: hci1: Injecting HCI hardware error event [ 442.253920][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.264456][ T4286] Bluetooth: hci1: hardware error 0x00 [ 442.276453][ T4284] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 442.337269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.358024][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.396967][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.421225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 442.450018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.464691][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.471918][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.554876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.570364][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 442.582261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.590908][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.598095][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.632198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 442.652453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 442.667827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 442.680450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.711324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.743008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 442.756549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.780677][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 442.792269][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.864841][ T4382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.895569][ T6655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.913324][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.922904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.939028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.995581][ T4382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.114091][ T4382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.217956][ T4382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.251215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.266267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.288834][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.356725][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.366048][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.483995][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.495966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 443.506608][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.513619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.527000][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.527121][ T6655] device veth0_vlan entered promiscuous mode [ 443.543966][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.551894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.557170][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 443.560293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.566706][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.608147][ T6655] device veth1_vlan entered promiscuous mode [ 443.730796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 443.742000][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 443.759976][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 443.805772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.832923][ T4365] usb 1-1: USB disconnect, device number 4 [ 443.836163][ T6655] device veth0_macvtap entered promiscuous mode [ 443.986536][ T6655] device veth1_macvtap entered promiscuous mode [ 444.106614][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 444.131237][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.157836][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.196637][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.247562][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.275287][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.295487][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.332649][ T4286] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 444.443876][ T6887] loop0: detected capacity change from 0 to 1024 [ 444.509070][ T6884] loop2: detected capacity change from 0 to 16 [ 444.600158][ T6887] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.641: Invalid block bitmap block 0 in block_group 0 [ 444.618003][ T6887] Quota error (device loop0): write_blk: dquota write failed [ 444.625745][ T6887] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 444.636199][ T6887] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.641: Failed to acquire dquot type 0 [ 444.654505][ T6887] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.641: Freeing blocks not in datazone - block = 0, count = 4096 [ 444.679604][ T6887] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.641: Invalid inode bitmap blk 0 in block_group 0 [ 444.703983][ T6887] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 444.717912][ T6887] EXT4-fs (loop0): 1 orphan inode deleted [ 444.723956][ T6887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 444.734707][ T56] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 444.989037][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:4: Failed to release dquot type 0 [ 445.482360][ T6884] erofs: (device loop2): mounted with root inode @ nid 36. [ 445.491630][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.583618][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.601731][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 446.191013][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.223696][ T6887] device batadv_slave_0 entered promiscuous mode [ 446.239030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.298646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.342718][ T6884] syz.2.643: attempt to access beyond end of device [ 446.342718][ T6884] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 446.390088][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.419516][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.459340][ T6884] syz.2.643: attempt to access beyond end of device [ 446.459340][ T6884] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 446.484808][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.520895][ T6884] syz.2.643: attempt to access beyond end of device [ 446.520895][ T6884] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 446.541504][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.581188][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.622081][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.680454][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.735431][ T6655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.764083][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 446.823996][ T6655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.848823][ T6655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.885221][ T6655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.933699][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.963155][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.453207][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.471705][ T4365] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 447.473389][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.578192][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.590832][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 447.676197][ T4365] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 447.686000][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.692268][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 447.694241][ T4365] usb 1-1: Product: syz [ 447.715969][ T4365] usb 1-1: Manufacturer: syz [ 447.720893][ T4365] usb 1-1: SerialNumber: syz [ 447.730036][ T4365] usb 1-1: config 0 descriptor?? [ 447.748153][ T4365] ch341 1-1:0.0: ch341-uart converter detected [ 447.770797][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.789251][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.858553][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 448.187199][ T4382] device hsr_slave_0 left promiscuous mode [ 448.195107][ T4382] device hsr_slave_1 left promiscuous mode [ 448.218234][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.229560][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.239549][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.253610][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.270377][ T4382] device bridge_slave_1 left promiscuous mode [ 448.277220][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.308758][ T4382] device bridge_slave_0 left promiscuous mode [ 448.316215][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.359524][ T4382] device veth1_macvtap left promiscuous mode [ 448.365728][ T4382] device veth0_macvtap left promiscuous mode [ 448.372248][ T4382] device veth1_vlan left promiscuous mode [ 448.378122][ T4382] device veth0_vlan left promiscuous mode [ 448.759369][ T4365] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 448.962542][ T4365] usb 1-1: USB disconnect, device number 5 [ 449.064037][ T4365] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 449.076442][ T4365] ch341 1-1:0.0: device disconnected [ 449.084062][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 449.159473][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 449.213983][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.268656][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.618378][ T6947] loop0: detected capacity change from 0 to 1024 [ 449.725531][ T29] hfsplus: b-tree write err: -5, ino 4 [ 449.772014][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 450.069677][ T4382] bond0 (unregistering): Released all slaves [ 450.132025][ T953] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 450.182727][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.213349][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.222962][ T6862] device bridge_slave_0 entered promiscuous mode [ 450.238497][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.271852][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.280529][ T6862] device bridge_slave_1 entered promiscuous mode [ 450.331670][ T953] usb 1-1: Using ep0 maxpacket: 32 [ 450.339005][ T953] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 450.362725][ T953] usb 1-1: config 0 has no interface number 0 [ 450.368901][ T953] usb 1-1: config 0 interface 89 has no altsetting 0 [ 450.395888][ T953] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 450.421654][ T953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.429716][ T953] usb 1-1: Product: syz [ 450.441646][ T953] usb 1-1: Manufacturer: syz [ 450.446306][ T953] usb 1-1: SerialNumber: syz [ 450.463238][ T953] usb 1-1: config 0 descriptor?? [ 450.487404][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.507052][ T953] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 450.524464][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.533890][ T953] em28xx 1-1:0.89: Video interface 89 found: bulk [ 450.655715][ T4318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 450.709761][ T6862] team0: Port device team_slave_0 added [ 450.735308][ T6862] team0: Port device team_slave_1 added [ 450.847774][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 450.855355][ T4318] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 450.870730][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.910918][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.913766][ T4318] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.948936][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.967063][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.971303][ T953] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 450.980779][ T4318] usb 4-1: Product: syz [ 450.989572][ T4318] usb 4-1: Manufacturer: syz [ 451.008021][ T4318] usb 4-1: SerialNumber: syz [ 451.026457][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.046857][ T4318] usb 4-1: config 0 descriptor?? [ 451.051621][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.105821][ T953] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 451.160368][ T953] em28xx 1-1:0.89: board has no eeprom [ 451.176092][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.241688][ T953] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 451.248950][ T953] em28xx 1-1:0.89: analog set to bulk mode. [ 451.332544][ T953] usb 1-1: USB disconnect, device number 6 [ 451.339116][ T953] em28xx 1-1:0.89: Disconnecting em28xx [ 451.374835][ T14] em28xx 1-1:0.89: Registering V4L2 extension [ 451.489653][ T6862] device hsr_slave_0 entered promiscuous mode [ 451.534498][ T6862] device hsr_slave_1 entered promiscuous mode [ 451.562105][ T6862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.569721][ T6862] Cannot create hsr debugfs directory [ 451.583927][ T14] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 451.591518][ T14] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 451.657147][ T14] em28xx 1-1:0.89: No AC97 audio processor [ 451.705376][ T14] usb 1-1: Decoder not found [ 451.710179][ T14] em28xx 1-1:0.89: failed to create media graph [ 451.750887][ T14] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 451.785053][ T6972] loop1: detected capacity change from 0 to 4096 [ 451.849054][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 451.879281][ T14] em28xx 1-1:0.89: Registering snapshot button... [ 451.893900][ T6972] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 451.898134][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input10 [ 451.932158][ T14] em28xx 1-1:0.89: Remote control support is not available for this card. [ 451.952338][ T953] em28xx 1-1:0.89: Closing input extension [ 451.960787][ T953] em28xx 1-1:0.89: Deregistering snapshot button [ 452.015873][ T6972] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 452.125778][ T26] audit: type=1800 audit(1743619001.537:9): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.661" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 452.139415][ T953] em28xx 1-1:0.89: Freeing device [ 452.578688][ T6992] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 452.635054][ T6997] loop0: detected capacity change from 0 to 1024 [ 452.679188][ T6862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 452.729230][ T6862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 452.790084][ T6862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 452.813491][ T6862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 452.962354][ T46] hfsplus: b-tree write err: -5, ino 4 [ 453.041142][ T7007] loop1: detected capacity change from 0 to 24 [ 453.065212][ T7007] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 453.115541][ T7007] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 453.140836][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.188770][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.207002][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.246742][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.282893][ T7009] loop0: detected capacity change from 0 to 4096 [ 453.289425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.323042][ T7009] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 453.352561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.383709][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.390868][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.481290][ T22] usb 4-1: USB disconnect, device number 2 [ 453.518046][ T7019] loop2: detected capacity change from 0 to 256 [ 453.520330][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.591999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.625927][ T7019] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 453.642104][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.684278][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.691459][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.755819][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.838541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.892346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.914641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.967665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 454.012252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 454.087832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 454.090195][ T7030] loop2: detected capacity change from 0 to 2048 [ 454.126282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 454.155622][ T7030] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 454.167678][ T4547] udevd[4547]: incorrect nilfs2 checksum on /dev/loop2 [ 454.197886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.228351][ T7037] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.258511][ T6862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.311055][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.407980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.433069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.837976][ T7052] loop2: detected capacity change from 0 to 4096 [ 455.077446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.090636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.127258][ T4276] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 455.131998][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.152053][ T4276] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 455.261136][ T7067] input: syz0 as /devices/virtual/input/input11 [ 455.373249][ T4547] udevd[4547]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 455.841386][ T7091] loop3: detected capacity change from 0 to 256 [ 455.881165][ T7091] FAT-fs (loop3): Unrecognized mount option "Ztf8=0" or missing value [ 455.981705][ T4547] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.227146][ T7104] loop1: detected capacity change from 0 to 512 [ 457.324494][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.357519][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.382175][ T7104] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.697: casefold flag without casefold feature [ 457.455829][ T7104] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.697: couldn't read orphan inode 15 (err -117) [ 457.487143][ T7111] loop7: detected capacity change from 0 to 16384 [ 457.504326][ T7104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 457.622266][ T6862] device veth0_vlan entered promiscuous mode [ 457.630086][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.639406][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.658560][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.696738][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 458.501770][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 458.509239][ T6862] device veth1_vlan entered promiscuous mode [ 458.538964][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.597766][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.665470][ T6862] device veth0_macvtap entered promiscuous mode [ 458.727356][ T7114] loop7: detected capacity change from 16384 to 16383 [ 458.743194][ T6862] device veth1_macvtap entered promiscuous mode [ 458.862706][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.891054][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.898276][ T7126] loop1: detected capacity change from 0 to 256 [ 458.925121][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.956350][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.983436][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.001874][ T7126] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 459.031778][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 459.042589][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.093197][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.137646][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.158298][ T7133] loop3: detected capacity change from 0 to 2048 [ 459.172434][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.231261][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.244462][ T7133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.281996][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.294087][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.305139][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.316113][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.340175][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.349390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 459.360595][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.382518][ T6862] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.400210][ T6862] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.420301][ T6862] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.429596][ T6862] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.703056][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.742021][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.768697][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 459.786572][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.802285][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.828664][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 459.936617][ T7155] loop1: detected capacity change from 0 to 512 [ 459.973338][ T7155] EXT4-fs: Ignoring removed nobh option [ 459.978966][ T7155] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.047820][ T7155] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.711: corrupted in-inode xattr [ 460.066719][ T7155] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.711: couldn't read orphan inode 15 (err -117) [ 460.086378][ T7155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 460.232579][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 460.388764][ T7170] netlink: 196 bytes leftover after parsing attributes in process `syz.1.714'. [ 460.524332][ T7177] loop1: detected capacity change from 0 to 1024 [ 460.605784][ T7177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 460.616998][ T7177] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.779408][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 460.848006][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 461.119981][ T7199] loop3: detected capacity change from 0 to 2048 [ 461.154671][ T7199] NILFS (loop3): invalid segment: Magic number mismatch [ 461.176428][ T7199] NILFS (loop3): trying rollback from an earlier position [ 461.217844][ T7199] NILFS (loop3): recovery complete [ 461.226686][ T7204] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 461.257567][ T7203] loop1: detected capacity change from 0 to 4096 [ 461.313297][ T7203] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 462.037734][ T7224] loop3: detected capacity change from 0 to 1024 [ 462.159893][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 462.238851][ T29] hfsplus: b-tree write err: -5, ino 4 [ 463.161639][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 463.181713][ T14] usb 2-1: config 254 has an invalid interface number: 240 but max is 0 [ 463.198785][ T14] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 463.212419][ T14] usb 2-1: config 254 has no interface number 0 [ 463.218739][ T14] usb 2-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.283527][ T14] usb 2-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 463.313378][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.321436][ T14] usb 2-1: Product: syz [ 463.361649][ T14] usb 2-1: Manufacturer: syz [ 463.366365][ T14] usb 2-1: SerialNumber: syz [ 463.605396][ T14] r8152-cfgselector 2-1: Unknown version 0x0000 [ 463.639589][ T14] r8152-cfgselector 2-1: Unknown version 0x0000 [ 463.659421][ T14] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 464.530777][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'. [ 464.627975][ T7271] loop1: detected capacity change from 0 to 1024 [ 464.903877][ T9] bond0: (slave bond_slave_0): interface is now down [ 464.911183][ T9] bond0: (slave bond_slave_1): interface is now down [ 464.918651][ T7280] bond0: option resend_igmp: invalid value (7540) [ 464.938039][ T7280] bond0: option resend_igmp: allowed values 0 - 255 [ 465.085901][ T7286] loop5: detected capacity change from 0 to 512 [ 465.130417][ T7286] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 465.272122][ T7286] EXT4-fs (loop5): 1 truncate cleaned up [ 465.277941][ T7286] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 465.553144][ T6862] EXT4-fs (loop5): unmounting filesystem. [ 465.718655][ T7309] loop1: detected capacity change from 0 to 512 [ 465.766526][ T7309] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.752: corrupted in-inode xattr [ 465.792037][ T7309] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.752: couldn't read orphan inode 15 (err -117) [ 465.813448][ T7309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 465.872515][ T7309] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.752: Directory hole found for htree leaf block 0 [ 466.030981][ T7324] loop0: detected capacity change from 0 to 512 [ 466.070764][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 466.122551][ T7324] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 466.135184][ T7324] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.161326][ T7331] netlink: 112 bytes leftover after parsing attributes in process `syz.1.760'. [ 466.244504][ T9] bond0: (slave bond_slave_0): interface is now down [ 466.254851][ T9] bond0: (slave bond_slave_1): interface is now down [ 466.292731][ T7334] loop1: detected capacity change from 0 to 1024 [ 466.335124][ T9] bond0: now running without any active interface! [ 466.443053][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 466.692584][ T7342] device syzkaller0 entered promiscuous mode [ 467.865810][ T7362] Bluetooth: MGMT ver 1.22 [ 468.005326][ T7364] loop0: detected capacity change from 0 to 512 [ 468.070284][ T7364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 470.248832][ T7384] loop2: detected capacity change from 0 to 512 [ 470.299273][ T7384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 470.308511][ T7384] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.401527][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 470.574853][ T7388] loop2: detected capacity change from 0 to 4096 [ 470.602330][ T7388] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 470.708751][ T4276] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 470.732472][ T4276] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 470.748830][ T4276] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 471.032269][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 472.041863][ T7413] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 472.048576][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 472.071391][ T7417] loop3: detected capacity change from 0 to 1024 [ 472.076948][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 472.098039][ T7414] vhci_hcd: connection closed [ 472.099407][ T4382] vhci_hcd: stop threads [ 472.124194][ T4382] vhci_hcd: release socket [ 472.128902][ T4382] vhci_hcd: disconnect device [ 472.151371][ T7417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 472.270448][ T6655] EXT4-fs (loop3): unmounting filesystem. [ 473.199358][ T7485] netlink: 5 bytes leftover after parsing attributes in process `syz.0.795'. [ 473.249363][ T7484] netlink: set zone limit has 8 unknown bytes [ 473.395409][ T7490] sp0: Synchronizing with TNC [ 473.572259][ T7495] loop5: detected capacity change from 0 to 512 [ 473.603638][ T7495] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.651422][ T7498] loop1: detected capacity change from 0 to 512 [ 473.686073][ T7495] EXT4-fs (loop5): 1 orphan inode deleted [ 473.705520][ T7498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 473.711291][ T7495] EXT4-fs (loop5): 1 truncate cleaned up [ 473.715271][ T7498] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.739466][ T7495] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 473.819471][ T7495] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.799: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 473.920705][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 473.954083][ T7495] EXT4-fs (loop5): Remounting filesystem read-only [ 474.019351][ T6862] EXT4-fs (loop5): unmounting filesystem. [ 474.518980][ T7535] loop5: detected capacity change from 0 to 512 [ 474.553000][ T7535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.616927][ T7535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 474.660665][ T7535] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.790500][ T7547] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.815'. [ 474.883581][ T6862] EXT4-fs (loop5): unmounting filesystem. [ 477.491797][ T4365] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 477.687203][ T4365] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 477.707310][ T4365] usb 2-1: config 0 has no interface number 0 [ 477.747458][ T4365] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 477.775568][ T4365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.786317][ T7638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 477.814467][ T4365] usb 2-1: Product: syz [ 477.818778][ T4365] usb 2-1: Manufacturer: syz [ 477.844868][ T4365] usb 2-1: SerialNumber: syz [ 477.874279][ T4365] usb 2-1: config 0 descriptor?? [ 478.491906][ T4365] asix 2-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 478.522080][ T4365] asix: probe of 2-1:0.239 failed with error -71 [ 478.547191][ T4365] usb 2-1: USB disconnect, device number 11 [ 478.725780][ T4484] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 478.921909][ T4484] usb 6-1: Using ep0 maxpacket: 32 [ 478.944671][ T4484] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 478.971696][ T4484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.012030][ T4484] usb 6-1: config 0 descriptor?? [ 479.024573][ T4484] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 479.631258][ T4484] gspca_nw80x: reg_w err -71 [ 479.640875][ T4484] nw80x: probe of 6-1:0.0 failed with error -71 [ 479.657029][ T4484] usb 6-1: USB disconnect, device number 2 [ 480.414942][ T7718] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.424866][ T7718] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.433802][ T7718] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.442682][ T7718] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.546898][ T7718] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 480.817496][ T7734] loop3: detected capacity change from 0 to 256 [ 481.001700][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 481.154226][ T7743] device batadv0 entered promiscuous mode [ 481.168435][ T7743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 481.200396][ T7743] device batadv0 left promiscuous mode [ 481.221614][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 481.231117][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 481.260048][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.290941][ T22] usb 6-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 481.306232][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.322800][ T22] usb 6-1: config 0 descriptor?? [ 481.411268][ T7749] loop3: detected capacity change from 0 to 1024 [ 481.420654][ T7749] EXT4-fs: Ignoring removed orlov option [ 481.469806][ T7749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 481.781038][ T22] lg-g15 0003:046D:C22E.0002: hidraw0: USB HID v0.00 Device [HID 046d:c22e] on usb-dummy_hcd.5-1/input0 [ 481.857778][ T6655] EXT4-fs (loop3): unmounting filesystem. [ 481.952017][ T22] usb 6-1: USB disconnect, device number 3 [ 482.154098][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 482.240636][ T7769] device team_slave_0 entered promiscuous mode [ 482.247573][ T7769] device team_slave_1 entered promiscuous mode [ 482.321432][ T7769] device macvtap1 entered promiscuous mode [ 482.338135][ T7769] device team0 entered promiscuous mode [ 482.366833][ T7769] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 482.962529][ T7788] loop7: detected capacity change from 16383 to 16384 [ 483.701186][ T26] audit: type=1326 audit(1743619033.107:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.5.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac41f8d169 code=0x0 [ 484.581716][ T4316] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 484.781830][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 484.794951][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 484.837811][ T7852] loop0: detected capacity change from 0 to 4096 [ 484.862404][ T4316] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 484.888513][ T7852] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 484.891841][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.932755][ T4316] usb 2-1: Product: syz [ 484.947629][ T4316] usb 2-1: Manufacturer: syz [ 484.957818][ T4316] usb 2-1: SerialNumber: syz [ 484.988080][ T4316] usb 2-1: config 0 descriptor?? [ 485.023422][ T4316] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 485.033091][ T4316] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 485.308062][ T7867] ./file0: Can't open blockdev [ 485.436283][ T7871] loop5: detected capacity change from 0 to 512 [ 485.447490][ T7871] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 485.479454][ T7871] EXT4-fs (loop5): 1 truncate cleaned up [ 485.536702][ T7871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 485.575234][ T7871] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 485.610755][ T4316] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 485.623594][ T7871] EXT4-fs (loop5): Remounting filesystem read-only [ 485.893441][ T6862] EXT4-fs (loop5): unmounting filesystem. [ 486.895993][ T4316] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 486.904144][ T4316] em28xx 2-1:0.0: board has no eeprom [ 487.217745][ T4316] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 487.231097][ T4316] em28xx 2-1:0.0: dvb set to bulk mode. [ 487.257683][ T4316] usb 2-1: USB disconnect, device number 12 [ 487.284742][ T953] em28xx 2-1:0.0: Binding DVB extension [ 487.316824][ T4316] em28xx 2-1:0.0: Disconnecting em28xx [ 487.422797][ T953] em28xx 2-1:0.0: Registering input extension [ 487.439972][ T4316] em28xx 2-1:0.0: Closing input extension [ 487.483144][ T4316] em28xx 2-1:0.0: Freeing device [ 487.563389][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'. [ 487.581007][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'. [ 488.330722][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 488.444469][ T7942] loop5: detected capacity change from 0 to 128 [ 488.511932][ T7942] syz.5.931: attempt to access beyond end of device [ 488.511932][ T7942] loop5: rw=3, sector=137, nr_sectors = 7 limit=128 [ 488.528666][ T7941] kvm: pic: single mode not supported [ 488.528900][ T7941] kvm: pic: level sensitive irq not supported [ 488.566297][ T7942] syz.5.931: attempt to access beyond end of device [ 488.566297][ T7942] loop5: rw=2051, sector=144, nr_sectors = 25 limit=128 [ 488.632184][ T7948] Bluetooth: MGMT ver 1.22 [ 488.674705][ T4316] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 488.881963][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 488.901255][ T4316] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 488.923917][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.969846][ T4316] usb 2-1: config 0 descriptor?? [ 489.005241][ T4316] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 489.181682][ T4484] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 489.391650][ T4484] usb 6-1: Using ep0 maxpacket: 16 [ 489.398784][ T4484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.420814][ T4484] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 489.432017][ T953] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 489.440471][ T4484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.460800][ T4484] usb 6-1: config 0 descriptor?? [ 489.624376][ T953] usb 4-1: Using ep0 maxpacket: 16 [ 489.648990][ T953] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 489.689309][ T953] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 489.708237][ T953] usb 4-1: Product: syz [ 489.728370][ T953] usb 4-1: Manufacturer: syz [ 489.738463][ T953] usb 4-1: SerialNumber: syz [ 489.750973][ T953] usb 4-1: config 0 descriptor?? [ 489.812864][ T4316] gspca_vc032x: reg_w err -71 [ 489.817628][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.843300][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.848653][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.877835][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.896948][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.902755][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.917709][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 489.918637][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.954295][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.959691][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.985818][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 489.991687][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 489.999174][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.001905][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.031387][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.039480][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.053013][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.058370][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.068923][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.081975][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.095682][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.099468][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.105164][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.109149][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.123432][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.128728][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.136932][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.140473][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.150149][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.154892][ T4316] gspca_vc032x: Unknown sensor... [ 490.164803][ T4316] vc032x: probe of 2-1:0.0 failed with error -22 [ 490.169312][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.182891][ T4316] usb 2-1: USB disconnect, device number 13 [ 490.194053][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.208182][ T14] usb 4-1: USB disconnect, device number 3 [ 490.210611][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.228333][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.239437][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.255997][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.269124][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.289672][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.299837][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.323894][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.353713][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.361264][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.404801][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.452347][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.460288][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.497774][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.525536][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.544214][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.571307][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.593177][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.600733][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.676870][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.737365][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.752481][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.776496][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.822419][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.846810][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.875956][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.896151][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.922851][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.957380][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 490.965723][ T8002] loop5: detected capacity change from 0 to 1024 [ 491.011696][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.062033][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.069709][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.123366][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.175342][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.201069][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.258437][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.296734][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.310594][ T8015] loop0: detected capacity change from 0 to 512 [ 491.336802][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.358946][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.395736][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.437089][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.447592][ T8015] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 491.462886][ T8015] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 491.479875][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.500988][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.551961][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.574109][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.577113][ T8030] loop3: detected capacity change from 0 to 512 [ 491.606688][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.617331][ T8030] EXT4-fs (loop3): Test dummy encryption mode enabled [ 491.629456][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.641220][ T8030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 491.668263][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.681419][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.691379][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.704830][ T8030] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.960: bad orphan inode 131083 [ 491.707023][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.723681][ T8030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 491.736200][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.746692][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.757899][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.767846][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.775586][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.783327][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.794259][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.809891][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.827686][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.844493][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.860109][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.878194][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.885974][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.894119][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.902127][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.909754][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.918566][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.936955][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.952502][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.961924][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 491.969281][ T8030] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 491.981917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 491.985590][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.018131][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.040538][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.059938][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.080723][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.089326][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.097787][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.105931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.109440][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.137066][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.152655][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.168157][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.188047][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.203475][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.211031][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.218570][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.229976][ T8030] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 492.230165][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.246515][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.254731][ T26] audit: type=1800 audit(1743619041.667:11): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.960" name="file1" dev="loop3" ino=19 res=0 errno=0 [ 492.254908][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.350408][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.365520][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.375242][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.382771][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.390679][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.399127][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.407826][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.415644][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.423386][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.430826][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.438575][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.446121][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.453759][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.461426][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.469128][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.476662][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.484566][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.492437][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.499957][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.507865][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.515987][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.525401][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.533235][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.540675][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.548638][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.557964][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.565991][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.573949][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.581482][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.589390][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.598576][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.606330][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.614165][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.622037][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.629573][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.637576][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.645503][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.653368][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.655508][ T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 492.660890][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.676481][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.684234][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.692085][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.699522][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.707493][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.715304][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.723344][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.731085][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.739034][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.746846][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.754691][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.762538][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.770102][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.778217][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.786172][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.793968][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.801490][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.809469][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.817449][ T4484] hid-generic 0003:0458:5016.0003: unknown main item tag 0x0 [ 492.843893][ T4484] hid-generic 0003:0458:5016.0003: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 492.868822][ T14] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 492.876660][ T4484] usb 6-1: USB disconnect, device number 4 [ 492.888519][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.908222][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 492.909201][ T6655] EXT4-fs (loop3): unmounting filesystem. [ 492.935636][ T46] hfsplus: b-tree write err: -5, ino 4 [ 492.951238][ T14] usb 2-1: config 0 descriptor?? [ 495.166886][ T14] usb 2-1: Cannot set autoneg [ 495.174145][ T14] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 495.304434][ T14] usb 2-1: USB disconnect, device number 14 [ 495.441118][ T8112] sctp: [Deprecated]: syz.5.975 (pid 8112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.441118][ T8112] Use struct sctp_sack_info instead [ 495.939573][ T8121] loop3: detected capacity change from 0 to 1024 [ 495.950074][ T8121] EXT4-fs: inline encryption not supported [ 495.956134][ T8121] EXT4-fs: Ignoring removed i_version option [ 495.962637][ T8121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.029980][ T8121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 496.288078][ T8121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 496.740156][ T8129] loop1: detected capacity change from 0 to 256 [ 496.756811][ T6655] EXT4-fs (loop3): unmounting filesystem. [ 496.838011][ T8129] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd137a500, utbl_chksum : 0xe619d30d) [ 497.285849][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.986'. [ 497.328462][ T8151] netlink: set zone limit has 8 unknown bytes [ 497.437708][ T8155] loop2: detected capacity change from 0 to 256 [ 497.478123][ T8155] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 497.519088][ T8158] loop0: detected capacity change from 0 to 128 [ 497.622951][ T26] audit: type=1800 audit(1743619047.037:12): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.992" name="file0" dev="loop0" ino=1048614 res=0 errno=0 [ 497.643830][ T4320] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 497.821804][ T4320] usb 6-1: Using ep0 maxpacket: 16 [ 497.836047][ T4320] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.877368][ T4320] usb 6-1: config 0 has no interface number 0 [ 497.917769][ T4320] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.968463][ T4320] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.999081][ T4320] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 498.017462][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.041157][ T4320] usb 6-1: config 0 descriptor?? [ 498.345470][ T8192] loop3: detected capacity change from 0 to 256 [ 498.409713][ T8192] FAT-fs (loop3): Unrecognized mount option "Ztf8=0" or missing value [ 498.544675][ T4320] usbhid 6-1:0.1: can't add hid device: -71 [ 498.550738][ T4320] usbhid: probe of 6-1:0.1 failed with error -71 [ 498.571025][ T4320] usb 6-1: USB disconnect, device number 5 [ 501.594246][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.331157][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 503.297156][ T8227] loop5: detected capacity change from 0 to 1024 [ 503.574322][ T8227] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 504.490806][ T8227] EXT4-fs (loop5): invalid journal inode [ 504.640908][ T8227] EXT4-fs (loop5): can't get journal size [ 504.737555][ T8227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 505.358614][ T8239] loop1: detected capacity change from 0 to 512 [ 505.395265][ T8239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.525230][ T8239] EXT4-fs (loop1): orphan cleanup on readonly fs [ 505.541051][ T8239] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1009: bg 0: block 248: padding at end of block bitmap is not set [ 505.559979][ T8239] Quota error (device loop1): write_blk: dquota write failed [ 505.567920][ T8239] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 505.578281][ T8239] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1009: Failed to acquire dquot type 1 [ 505.597500][ T8239] EXT4-fs (loop1): 1 truncate cleaned up [ 505.605418][ T8239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 506.433832][ T8246] loop0: detected capacity change from 0 to 1024 [ 509.521049][ T8246] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1022: Invalid block bitmap block 0 in block_group 0 [ 509.537143][ T8246] Quota error (device loop0): write_blk: dquota write failed [ 509.544952][ T8246] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 509.555537][ T8246] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.1022: Failed to acquire dquot type 0 [ 509.569414][ T8246] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.1022: Freeing blocks not in datazone - block = 0, count = 4096 [ 509.587965][ T8246] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1022: Invalid inode bitmap blk 0 in block_group 0 [ 509.603629][ T8246] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 509.614923][ T8246] EXT4-fs (loop0): 1 orphan inode deleted [ 509.620843][ T8246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 509.763876][ T4331] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 509.844091][ T4331] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 0 [ 510.135709][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 510.547504][ T6862] EXT4-fs (loop5): unmounting filesystem. [ 511.778830][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 511.817833][ T8263] xt_bpf: check failed: parse error [ 512.049168][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 517.714031][ T8298] loop0: detected capacity change from 0 to 512 [ 517.743791][ T8298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.835693][ T8298] EXT4-fs (loop0): orphan cleanup on readonly fs [ 517.861973][ T8298] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1026: bg 0: block 248: padding at end of block bitmap is not set [ 517.880595][ T8298] Quota error (device loop0): write_blk: dquota write failed [ 517.888423][ T8298] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 517.898636][ T8298] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.1026: Failed to acquire dquot type 1 [ 517.918051][ T8298] EXT4-fs (loop0): 1 truncate cleaned up [ 518.093273][ T8298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 518.185951][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 521.735066][ T8319] loop1: detected capacity change from 0 to 1024 [ 521.880986][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 522.005991][ T8319] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1031: Invalid block bitmap block 0 in block_group 0 [ 522.022077][ T8319] Quota error (device loop1): write_blk: dquota write failed [ 522.029709][ T8319] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 522.039833][ T8319] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1031: Failed to acquire dquot type 0 [ 522.059016][ T8319] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1031: Freeing blocks not in datazone - block = 0, count = 4096 [ 522.088231][ T8319] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1031: Invalid inode bitmap blk 0 in block_group 0 [ 522.102731][ T8319] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 522.114535][ T4699] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 522.124468][ T8319] EXT4-fs (loop1): 1 orphan inode deleted [ 522.130411][ T8319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 522.225712][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.337743][ T4699] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:16: Failed to release dquot type 0 [ 524.046873][ T8327] loop3: detected capacity change from 0 to 512 [ 524.056535][ T8319] device batadv_slave_0 entered promiscuous mode [ 524.906373][ T8327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 526.003878][ T8327] EXT4-fs: failed to create workqueue [ 526.009321][ T8327] EXT4-fs (loop3): mount failed [ 526.081780][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 528.967203][ T8347] loop0: detected capacity change from 0 to 512 [ 529.008653][ T8347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 529.177696][ T8350] netlink: 'syz.2.1037': attribute type 16 has an invalid length. [ 529.185764][ T8350] netlink: 'syz.2.1037': attribute type 17 has an invalid length. [ 529.229432][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.237862][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.123346][ T8347] EXT4-fs (loop0): orphan cleanup on readonly fs [ 530.139450][ T8347] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1036: bg 0: block 248: padding at end of block bitmap is not set [ 530.153892][ T8350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.348055][ T8347] Quota error (device loop0): write_blk: dquota write failed [ 530.356260][ T8347] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 530.366468][ T8347] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.1036: Failed to acquire dquot type 1 [ 530.389830][ T8347] EXT4-fs (loop0): 1 truncate cleaned up [ 530.401279][ T8347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 530.473148][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 533.338862][ T8358] xt_CT: No such helper "netbios-ns" [ 534.076465][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.091619][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.101286][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.109944][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.117833][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 534.125956][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.309145][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 534.377958][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.387328][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.395623][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.405551][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.413813][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 534.421802][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.945155][ T8377] loop1: detected capacity change from 0 to 512 [ 536.182676][ T8377] EXT4-fs (loop1): 1 orphan inode deleted [ 536.188598][ T8377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 536.206779][ T8377] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.821750][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 536.903755][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 537.020829][ T8381] xt_bpf: check failed: parse error [ 537.111976][ T46] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 537.123740][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:3: Failed to release dquot type 1 [ 537.300404][ T8376] [ 537.302821][ T8376] ====================================================== [ 537.309950][ T8376] WARNING: possible circular locking dependency detected [ 537.316985][ T8376] 6.1.132-syzkaller #0 Not tainted [ 537.322110][ T8376] ------------------------------------------------------ [ 537.329228][ T8376] syz.2.1046/8376 is trying to acquire lock: [ 537.335219][ T8376] ffff888077e04c58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 537.344964][ T8376] [ 537.344964][ T8376] but task is already holding lock: [ 537.352365][ T8376] ffff888051aa7430 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 537.363306][ T8376] [ 537.363306][ T8376] which lock already depends on the new lock. [ 537.363306][ T8376] [ 537.373732][ T8376] [ 537.373732][ T8376] the existing dependency chain (in reverse order) is: [ 537.382855][ T8376] [ 537.382855][ T8376] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 537.391624][ T8376] lock_acquire+0x1f8/0x5a0 [ 537.396689][ T8376] down_write+0x36/0x60 [ 537.401400][ T8376] process_measurement+0x446/0x21b0 [ 537.407212][ T8376] ima_file_mmap+0x121/0x1c0 [ 537.412436][ T8376] __se_sys_remap_file_pages+0x67a/0x8b0 [ 537.418626][ T8376] do_syscall_64+0x3b/0xb0 [ 537.423593][ T8376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.430042][ T8376] [ 537.430042][ T8376] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 537.437652][ T8376] validate_chain+0x1661/0x5950 [ 537.443068][ T8376] __lock_acquire+0x125b/0x1f80 [ 537.448595][ T8376] lock_acquire+0x1f8/0x5a0 [ 537.453708][ T8376] down_read_killable+0xc6/0xd10 [ 537.459211][ T8376] mmap_read_lock_killable+0x1d/0x60 [ 537.465056][ T8376] lock_mm_and_find_vma+0x2a7/0x2e0 [ 537.470812][ T8376] exc_page_fault+0x169/0x620 [ 537.476046][ T8376] asm_exc_page_fault+0x22/0x30 [ 537.481457][ T8376] fault_in_readable+0x1c8/0x340 [ 537.486957][ T8376] fault_in_iov_iter_readable+0xdb/0x270 [ 537.493247][ T8376] generic_perform_write+0x207/0x5e0 [ 537.499084][ T8376] __generic_file_write_iter+0x176/0x400 [ 537.505267][ T8376] generic_file_write_iter+0xab/0x310 [ 537.511454][ T8376] vfs_write+0x857/0xbc0 [ 537.516241][ T8376] ksys_write+0x19c/0x2c0 [ 537.521113][ T8376] do_syscall_64+0x3b/0xb0 [ 537.526071][ T8376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.532509][ T8376] [ 537.532509][ T8376] other info that might help us debug this: [ 537.532509][ T8376] [ 537.542751][ T8376] Possible unsafe locking scenario: [ 537.542751][ T8376] [ 537.550214][ T8376] CPU0 CPU1 [ 537.555668][ T8376] ---- ---- [ 537.561066][ T8376] lock(&sb->s_type->i_mutex_key#12); [ 537.566580][ T8376] lock(&mm->mmap_lock); [ 537.573463][ T8376] lock(&sb->s_type->i_mutex_key#12); [ 537.581486][ T8376] lock(&mm->mmap_lock); [ 537.585842][ T8376] [ 537.585842][ T8376] *** DEADLOCK *** [ 537.585842][ T8376] [ 537.594097][ T8376] 3 locks held by syz.2.1046/8376: [ 537.599228][ T8376] #0: ffff88807c94c0e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 537.608513][ T8376] #1: ffff8880252b2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 537.617457][ T8376] #2: ffff888051aa7430 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 537.628901][ T8376] [ 537.628901][ T8376] stack backtrace: [ 537.634817][ T8376] CPU: 1 PID: 8376 Comm: syz.2.1046 Not tainted 6.1.132-syzkaller #0 [ 537.642909][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 537.652993][ T8376] Call Trace: [ 537.656296][ T8376] [ 537.659248][ T8376] dump_stack_lvl+0x1e3/0x2cb [ 537.664135][ T8376] ? nf_tcp_handle_invalid+0x647/0x647 [ 537.669641][ T8376] ? print_circular_bug+0x12b/0x1a0 [ 537.674875][ T8376] check_noncircular+0x2fa/0x3b0 [ 537.679842][ T8376] ? add_chain_block+0x850/0x850 [ 537.684821][ T8376] ? lockdep_lock+0x11f/0x2a0 [ 537.689523][ T8376] ? _find_first_zero_bit+0xd0/0x100 [ 537.694843][ T8376] validate_chain+0x1661/0x5950 [ 537.699709][ T8376] ? reacquire_held_locks+0x660/0x660 [ 537.705107][ T8376] ? reacquire_held_locks+0x660/0x660 [ 537.710495][ T8376] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 537.716522][ T8376] ? mark_lock+0x9a/0x340 [ 537.720875][ T8376] ? reacquire_held_locks+0x660/0x660 [ 537.726282][ T8376] ? mark_lock+0x9a/0x340 [ 537.730621][ T8376] ? reacquire_held_locks+0x660/0x660 [ 537.736006][ T8376] ? __lock_acquire+0x125b/0x1f80 [ 537.741064][ T8376] ? mark_lock+0x9a/0x340 [ 537.745401][ T8376] __lock_acquire+0x125b/0x1f80 [ 537.750287][ T8376] lock_acquire+0x1f8/0x5a0 [ 537.754904][ T8376] ? mmap_read_lock_killable+0x1d/0x60 [ 537.760474][ T8376] ? read_lock_is_recursive+0x10/0x10 [ 537.765873][ T8376] ? __might_sleep+0xb0/0xb0 [ 537.770560][ T8376] down_read_killable+0xc6/0xd10 [ 537.775509][ T8376] ? mmap_read_lock_killable+0x1d/0x60 [ 537.780985][ T8376] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 537.786976][ T8376] ? cmp_ex_search+0x70/0x90 [ 537.791569][ T8376] ? mmap_read_lock_killable+0x1d/0x60 [ 537.797053][ T8376] ? bsearch+0x8e/0xb0 [ 537.801127][ T8376] ? down_read_interruptible+0xc40/0xc40 [ 537.806888][ T8376] ? search_extable+0xaf/0xf0 [ 537.811583][ T8376] ? trim_init_extable+0x3c0/0x3c0 [ 537.816701][ T8376] ? fault_in_readable+0x1c8/0x340 [ 537.821841][ T8376] ? __init_rwsem+0x160/0x160 [ 537.826545][ T8376] ? print_irqtrace_events+0x210/0x210 [ 537.832075][ T8376] mmap_read_lock_killable+0x1d/0x60 [ 537.837407][ T8376] lock_mm_and_find_vma+0x2a7/0x2e0 [ 537.842769][ T8376] exc_page_fault+0x169/0x620 [ 537.847459][ T8376] asm_exc_page_fault+0x22/0x30 [ 537.852320][ T8376] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 537.858052][ T8376] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 32 da bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 537.877747][ T8376] RSP: 0018:ffffc9000c5af9e0 EFLAGS: 00050287 [ 537.883824][ T8376] RAX: ffffffff81cad01e RBX: 000020000015a000 RCX: 0000000000080000 [ 537.891796][ T8376] RDX: ffffc90005d09000 RSI: 0000000000022fef RDI: 0000000000022ff0 [ 537.899772][ T8376] RBP: ffffc9000c5afa98 R08: ffffffff81cacfb6 R09: ffffffff8441a0e5 [ 537.907856][ T8376] R10: 0000000000000002 R11: ffff88807c84d940 R12: 0000000000001000 [ 537.915841][ T8376] R13: dffffc0000000000 R14: 000020000015b000 R15: 1ffff920018b5f44 [ 537.923829][ T8376] ? fault_in_iov_iter_readable+0x45/0x270 [ 537.929656][ T8376] ? fault_in_readable+0x156/0x340 [ 537.934862][ T8376] ? fault_in_readable+0x1be/0x340 [ 537.939981][ T8376] ? fault_in_safe_writeable+0x250/0x250 [ 537.945639][ T8376] ? inode_to_bdi+0x65/0xd0 [ 537.950150][ T8376] fault_in_iov_iter_readable+0xdb/0x270 [ 537.955794][ T8376] generic_perform_write+0x207/0x5e0 [ 537.961180][ T8376] ? generic_file_direct_write+0x460/0x460 [ 537.966989][ T8376] ? __file_remove_privs+0x640/0x640 [ 537.972279][ T8376] ? generic_write_checks+0x15c/0x1c0 [ 537.977658][ T8376] ? clear_nonspinnable+0x60/0x60 [ 537.982694][ T8376] __generic_file_write_iter+0x176/0x400 [ 537.988355][ T8376] generic_file_write_iter+0xab/0x310 [ 537.993732][ T8376] vfs_write+0x857/0xbc0 [ 537.998067][ T8376] ? file_end_write+0x250/0x250 [ 538.003025][ T8376] ? __fget_files+0x28/0x4a0 [ 538.007718][ T8376] ? __fget_files+0x435/0x4a0 [ 538.012406][ T8376] ? __fdget_pos+0x2ba/0x360 [ 538.017089][ T8376] ? ksys_write+0x77/0x2c0 [ 538.021554][ T8376] ksys_write+0x19c/0x2c0 [ 538.025934][ T8376] ? print_irqtrace_events+0x210/0x210 [ 538.031493][ T8376] ? __ia32_sys_read+0x80/0x80 [ 538.036269][ T8376] ? syscall_enter_from_user_mode+0x2e/0x230 [ 538.042280][ T8376] ? lockdep_hardirqs_on+0x94/0x130 [ 538.047486][ T8376] ? syscall_enter_from_user_mode+0x2e/0x230 [ 538.053478][ T8376] do_syscall_64+0x3b/0xb0 [ 538.057984][ T8376] ? clear_bhb_loop+0x45/0xa0 [ 538.062668][ T8376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.068571][ T8376] RIP: 0033:0x7f6cd5d8d169 [ 538.073004][ T8376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.092656][ T8376] RSP: 002b:00007f6cd6bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.101113][ T8376] RAX: ffffffffffffffda RBX: 00007f6cd5fa5fa0 RCX: 00007f6cd5d8d169 [ 538.109194][ T8376] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000008 [ 538.117175][ T8376] RBP: 00007f6cd5e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 538.125153][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.133140][ T8376] R13: 0000000000000000 R14: 00007f6cd5fa5fa0 R15: 00007fff5e046a08 [ 538.141141][ T8376] [ 538.294249][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 538.662818][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.886174][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.926887][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.996644][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.789678][ T56] device hsr_slave_0 left promiscuous mode [ 539.798900][ T56] device hsr_slave_1 left promiscuous mode [ 539.806163][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.815828][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.826421][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.836030][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.844227][ T56] device bridge_slave_1 left promiscuous mode [ 539.850470][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.861330][ T56] device bridge_slave_0 left promiscuous mode [ 539.867892][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.881155][ T56] device veth1_macvtap left promiscuous mode [ 539.887425][ T56] device veth0_macvtap left promiscuous mode [ 539.896160][ T56] device veth1_vlan left promiscuous mode [ 539.902060][ T56] device veth0_vlan left promiscuous mode [ 540.094832][ T56] team0 (unregistering): Port device team_slave_1 removed [ 540.126825][ T56] team0 (unregistering): Port device team_slave_0 removed [ 540.157619][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.191575][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.246590][ T56] bond0 (unregistering): Released all slaves [ 540.860632][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.906142][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.968624][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.016790][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.123056][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.196860][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.277819][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.345952][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.424706][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.470598][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.526327][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.596496][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.731104][ T56] tipc: Left network mode [ 543.214741][ T56] device hsr_slave_0 left promiscuous mode [ 543.221135][ T56] device hsr_slave_1 left promiscuous mode [ 543.227817][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.237151][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.244832][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.252732][ T56] device bridge_slave_0 left promiscuous mode [ 543.258951][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.269773][ T56] device hsr_slave_0 left promiscuous mode [ 543.276270][ T56] device hsr_slave_1 left promiscuous mode [ 543.282849][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.290340][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.298252][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.308114][ T56] device hsr_slave_0 left promiscuous mode [ 543.314439][ T56] device hsr_slave_1 left promiscuous mode [ 543.324349][ T56] device veth1_macvtap left promiscuous mode [ 543.330457][ T56] device veth0_macvtap left promiscuous mode [ 543.336684][ T56] device veth1_vlan left promiscuous mode [ 543.342571][ T56] device veth0_vlan left promiscuous mode [ 543.349479][ T56] device veth1_macvtap left promiscuous mode [ 543.355651][ T56] device veth0_macvtap left promiscuous mode [ 543.362706][ T56] device veth1_vlan left promiscuous mode [ 543.368487][ T56] device veth0_vlan left promiscuous mode [ 543.375237][ T56] device veth1_macvtap left promiscuous mode [ 543.381255][ T56] device veth0_macvtap left promiscuous mode [ 543.387518][ T56] device veth1_vlan left promiscuous mode [ 543.393374][ T56] device veth0_vlan left promiscuous mode [ 543.673555][ T56] team0 (unregistering): Port device team_slave_1 removed [ 543.704334][ T56] team0 (unregistering): Port device team_slave_0 removed [ 543.734898][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.766337][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.950878][ T56] bond0 (unregistering): Released all slaves [ 544.192923][ T56] team0 (unregistering): Port device team_slave_1 removed [ 544.204415][ T56] team0 (unregistering): Port device team_slave_0 removed [ 544.235172][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.265824][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.317129][ T56] bond0 (unregistering): Released all slaves [ 544.334930][ T56] bond0 (unregistering): Released all slaves [ 544.957120][ T56] bond0 (unregistering): Released all slaves