last executing test programs: 5.25695731s ago: executing program 4 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0x86, &(0x7f0000000480)=""/134, 0x0, 0x5, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000540), &(0x7f0000000980), 0x10, 0x7, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000011b, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000ea59905b774681f8866c5026909f9c000000000000b7080000000000007b8af8fff0530000bf0000b703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 5.109661663s ago: executing program 4 (id=689): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) add_key(0x0, 0x0, &(0x7f0000000180)="02", 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000700)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 5.039233629s ago: executing program 1 (id=690): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0), 0x4) 4.961349445s ago: executing program 4 (id=692): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 4.914510659s ago: executing program 1 (id=693): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x880, &(0x7f0000005a40)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfd, 0x11f4, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) utimensat(r0, 0x0, &(0x7f0000000b00), 0x0) 4.598648566s ago: executing program 1 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r2, 0x0, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) 4.532039412s ago: executing program 4 (id=696): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-(\xb94\xf1\x9c\x83\nbo<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<>\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) 1.172478279s ago: executing program 2 (id=719): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 1.036261011s ago: executing program 0 (id=720): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0xee01, r3) setreuid(0x0, r2) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[], 0x10) 880.581334ms ago: executing program 0 (id=721): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1800006, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r1, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) 682.589611ms ago: executing program 0 (id=722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4e}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 635.691925ms ago: executing program 0 (id=724): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:'], 0xa) 431.840733ms ago: executing program 2 (id=725): r0 = syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r2, 0x0) ftruncate(r2, 0xc17a) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x0, @pix_mp}) 270.719416ms ago: executing program 0 (id=726): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)={[{@nls={'nls', 0x3d, 'cp850'}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@uid}, {@force}, {@nobarrier}]}, 0x3, 0x6ac, &(0x7f0000001980)="$eJzs3U+InGcdB/DvO9nMZiKm2zZNowhdGijaYLKboSaC0CgiOQQJerDXJdk0SyZp2WwlLWImahU8eZIePFQkHnoSEaGexHoWBC+ecg9485CDuvK+887s7Mxks5t/s20/H3j3fZ553ud5fu9v3z/zZ5cJ8Kl15rXs7abImaNnr5f127fandu32lf65SSzSRrJTG+VopUUHyWn01vyufLBerjiXvO8cufDYua9D9q92ky9VNs3tuo3ZuKW3WTfoLInyXyv+J9tDzs2XrVU45zfGO8BFYO4y4Qd6ScOpm19THejsXHf7ts/b4Fd60bvvjlmLtmf3t21fB6Q+upw/yvD9G15beo+uTgAAADgcZn4Wn7YU3dzN9dz4MmEAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8MRe87A4t6afTL8yn63//fHPpO/eaUw31I716sVt95atqBAAAAAAAAAMBDeeFu7uZ6DvTr60X1mf+LVeVg9fMzeSvXspzVHMv1LGUta1nNYpK5oYGa15fW1lYXx3v+MmXP9fX1G3XPExN7ntgcV3c00El/aTC2EQAAAAAAAAB8av0oZzY+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN2gSPb0VtVysF+eS2Mmyb4kzWJ+sHlzqsE+An+edgAAAADwGBSbq616faD4X6+wXlSv+Q9Vm+7LW7mataxkLZ0s50LdvXzV3/h7t925fat9pVzG5/n6v3YUVjVieu89TJ55odriuUGPM/lWvpujmc+5rGYl389S1rKc+XyzKi2lyFy9w3O3b7XSj3U83tObaudGY3thqFzGd7iKpJWLWaliO5bzzX7ojXq7w0Oz/bGZjMx4s8xO8Wptmzm6UK/LPfrF+K9yiuaqPd87yMhCnfsyG08P53089zs8TkZnWkxj8B7UwY1ZyuroTA+U8/31usz1Tx9vznf4VtrmTHR/Xtb6R9+hrXOefOkffzl3qXH18qWL147unsPoAY0eE+2hTDy/rUx0ykx0HyIT+x4m/kenWWejdxXd2dXyxarvgazk23kjF7Kck1nIYk5lIV/NibRzYiivz22d1+pca+zsXDvyxbpQ3pN+NnRvemJm79VQ5vXpobwOX+nmqrbhRzay9Mw2slQ0MzlL/5wYyszn60I5x4+H7jjTN5qJxaFMPLt1Jn793/Uk1zpXL69eWnpzm/O9VK/L0/bdzdfm3zySHdq5enfL4+WZ8peV3m1j+Ogo257tt43kq1l/4jJTD7aprZnqfO613e9MLUc6dHPSSL225yfO0q7aDg+1bXqWkzfSGTwLAWAX2//y/mbrTutvrfdbP2ldap3d943ZU7NfaGbvX2f+tOd3jd82vla8nPfzwxyYdqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBJcO3tdy4vdTrLq7uwkMYjHvDmxKZ+KnqPNHfHvn9cC7NbHVG/T7JF9+Y0Ym4l2RWpy8wTmGs2E5rODh5pJY1BPEku75IvuAMeh+NrV948fu3td768cmXp9eXXl6+eOHXy1ZPtryzeOH5xpbO80Ps57SiBx2HjacC0IwEAAAAAAAAAAAC2a1v/PPC9PNT/HozO+dmk6E5ndwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICPoTOvZW83RRYXji2U9du32p1y6Zc3tpxJ0khS/CApPkpOp7dkbmi44l7zvHLnw1+99N4H7Y2xZvrbN0b6/eHf6+s73ItuvWQ+yZ56fX+z2xrv/NB43R0G1lMM9rBM2JF+4mDa/h8AAP//I7UHQA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 270.444746ms ago: executing program 4 (id=727): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r3}, 0x8) 261.319577ms ago: executing program 2 (id=728): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$tun(r1, &(0x7f0000000900)={@void, @val, @ipv6=@icmpv6={0x0, 0x6, "41b0ca", 0xa6, 0x3a, 0x0, @rand_addr=' \x01\x00', @empty, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x0, 0x0, '\x00', [@generic]}, @fragment, @dstopts={0x0, 0x8, '\x00', [@pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @jumbo]}], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65fc0f1fba4b"}}}}, 0xd8) 134.459308ms ago: executing program 2 (id=729): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000000c0)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) 1.72026ms ago: executing program 0 (id=730): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000022c0)={@dev={0xac, 0x14, 0x14, 0x10}, @empty, 0x0, "8a147ab429a268100a54c80e1e7a328017293a1441396d46117beb5ab1394be4", 0x200, 0x1, 0xb, 0x81}, 0x3c) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) 1.20667ms ago: executing program 2 (id=731): syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000700)={[{@dmask={'dmask', 0x3d, 0x7}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x3e70ca1}}, {@discard}, {@gid}, {@fmask={'fmask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x6}}, {@gid}]}, 0x1, 0x1508, &(0x7f0000002c80)="$eJzs3Au8TtXWMPAx5pyLTdKT5JY55lg8yWWSJLkk5JIkSZLklpAkSRKSW25JSELuSe4hucVO7vf7PUmOJElCQpL5/VTn9Z6393z1ved8n3O+Pf6/32KOvZ4xnrGesfd+1lq/vfc37QdVrlulQm1mhn8I/vpfNwBIAYC+AHANAEQAUDxL8SyX9mfQ2O0fexLxz/XQ1CvdgbiSZP5pm8w/bZP5p20y/7RN5p+2yfzTNpl/2ibzFyIt2zIt57Wypd3tz9//d//73XL//9+QvP//f+tPfaXJ/NM2mX/aJvNP22T+aZvMP22T+adtMv+0TeYvRFp2pe8//xtsf32prnQff7BF/6O8K/vZJ4QQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAirTgXLjMA8Nf1le5LCCGEEEIIIYQQ/zwh/ZXuQAghhBBCCCGEEP/3IYDRYCCCdJAeUiADZISrIBNcDZnhGkjAtZAFroOscD1kg+yQA3JCLrgBcoMFAgcMMeSBvJCEGyEf3AT5oQAUhELgoTAUgZuhKNwCxeBWKA6zFwLcDiWhFJSGMnAHlIU7oRyUhwpwF1SESlAZqsDdUBXugWpwL1SH+6AG3A814QGoBQ9CbXgI6sDDUBcegXrwKNSHBtAQGkHj/1H+i9AZXoIu0BW6QXfoAS9DT+gFvaEP9IVXoB+8Cv3hNRgAA2EQvA6D4Q0YAm/CUBgGw+EtGAEjYRSMhjEwFsbB2zAe3oEJ8C5MhEkwGabAVJgG0+E9mAEzYRa8D7PhA5gDc2EezIcF8CEshEWQCh/BYvgYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEXbC7/B74BPbCp7APPoP98Pn/Yf5Z+Nv8DggIqFChQYPpMB2mYApmxIyYCTNhZsyMCUxgFsyCWTErZsNsmANzYC7MhbkxNxISMjLmwTyYxCTmw3yYH/NjQSyIHj0WwSJYFG/BYlgMi2NxLIElsCSWwlJYBstgWSyL5bAcVrh9LgBWxMpYGe/Gu/EerIbVsDpWxxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHhtgQG2NjbIJNsCk2xebYHFtgC2yJLbEVtsLW2BrbYBtsi22xHbbD9tgeO2BH7Igv4ov4Er6EXbGi6o49sAf2xJ7YG/tgH3wF++Gr+Cq+hgNwIA7C1/F1fAOH4BkcisNwOA7HsmokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxPdxNn6AH+BcnIvzcQEuwIW4CFMxFRfjWVyCS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3IxbcStux+24E3fibtyNn+An+Cl+igNwP+7HA3gAD+JBPISH8DAexiN4ZOtVAHgMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/VVnd0F1g4AdYlRRqVT6VSKSlEZVUaVSWVSmVVmlVAJlUVlUVlVVpVNZVM5VA6VS+VSuVVuRYoUq1jlUXlUUiVVPpVP5Vf5VUFVUHnlVRFVRBVVRVUxVUwVV7epEup2VVKVUs18GVVGlVXNfTlVXlVQFVRFVUlVVlVUFVVVVVXVVDVVXVVXNVQNVVM9oGqp7tgbH1KXJlNXDcR6ahDWVw1UQ9VIvYGPqSZqCDZVzVRz9YQahkOxpWriW6mnVWs1CtuoZ9VofE61U2OxvXpBdVAdVSf1ouqsmvouqquaiN1VDzUFe6peqrfqo2ZgJXVpYpXVa2qAGqgGqdfVfHxDDVFvqqFqmBqu3lIj1Eg1So1WY9RYNU69rcard9QE9a6aqCapyWqKmqqmqenqPTVDzVSz1PtqtvpAzVFz1Tw1Xy1QH6qFapFKVR+pxepjtUQtVcvUcrVCrVSr1Gq1Rq1V69R6tUFtVJvUZrVFbVXb1Ha1Q+1Uu9RutUd9ovaqT9U+9Znarz5XB9Rf1EH1hTqkvlSH1VfqiPpaHVXfqGPqW3VcdVUn1El1Sn2vTqsf1Bl1Vp1TP6rz6id1Qf2sLqqgQKNWWmujI51Op9cpOoPOqK/SmfTVOrO+Rif0tTqLvk5n1dfrbDq7zqFz6lz6Bp1bW03aadaxzqPz6qS+UefTN+n8uoAuqAtprwvrIvpmXVTfoovpW3VxfZsuoW/XJXUpXVqX0XfosvpOXU6X1xX0XbqirqQr6yr6bl1V36Or6Xt1dX2frqHv1zX1A7qWflDX1g/pOvphXVc/ouvpR3V93UA31I10Y/2YbqIf1011M91cP6Fb6Cd1S/2UbqWf1q31M7qNfla31c/pdvp53V6/oDvojrqT/llf1EF30V11N91d99Av6566l+6t++i++hXdT7+q++vX9AA9UA/Sr+vB+g09RL+ph+pherh+S4/QI/UoPVqP0WP1OP22Hq/f0RP0u3qinqQn6yl6qp6me/9WadafyH/nv8nv/8uzb9Zb9Fa9TW/XO/ROvUvv1nv0Hr1X79X79D69X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf0Sf2j/l6f1j/oM/qsPqt/1Of1eX3ht9cADBpltDEmMulMepNiMpiM5iqTyVxtMptrTMJca7KY60xWc73JZrKbHCanyWVuMLmNNWScYRObPCavSZobTT5zk8lvCpiCppDxprApYm7+h/P/Tn/LJ/968mIam8amiWlimpqmprlpblqYFqalaWlamVamtWlt2pg2pq1pa9qZdqa9aW86mA6mk+lkOpvOpguC6Wa6mR7mZdPT9DK9TR/T17xi+pl+pr/pbwaYAWaQGWQGm8FmiBlihpqhxgDACDPCjDKjzBgzxowz48x4M95MMBPMRDPRTDaTzVQz1Uw3080MM8PMMrPMbDPbzDFzzDwzzywwC8xCs9CkmlSz2Cw2S8xSs9QsN8vNSrPSrDarzVqz1qw3681Gs9EsMVvMFrPNbDM7zA6zy+wye8wes9fsNfvMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFz3Bw3J8wJc8qcMqfNaXPGnDHnzDlz3pw3F8wFc9FcvHTaF6lIRSYyUbooXZQSpUQZo4xRpihTlDnKHCWiRJQlyhJlja6PskXZoxxRzihXdEOUO7IRRS7iKI7yRHmjZHRjlC+6KcofFYgKRoUiHxWOikQ3R0WjW6Ji0a1R8ei2qER0e1QyKhWVjspEd0RlozujclH5qEJ0V1QxqhRVjqpEd0dVo3uiatG9UfXovqhGdH9UM3ogqhU9GNWOHorqRA9HdaNHonrRo1H9qEHUMGoUNf6n1g/hTPbHfRfb1aaH7raHfdn2tL1sb9vH9rWv2H72VdvfvmYH2IF2kH3dDrZv2CH2TTvUDrPD7Vt2hB1pR9nRdowda8fZt+14+46dYN+1E+0kO9lOsVPtNDvdvmdn2Jl2ln3fzrYf2Dl2rp1n59sF9kO70C6yqfYju9h+bJfYpXaZXW5X2JV2lV1t19i1dp1dbzfYjXaT3Wy32K12m91ud9iddpfdbffYT+xe+6ndZz+z++3n9oBN+e38/kt72H5lj9iv7VH7jT1mv7XH7Xf2hD1pT9nv7Wn7gz1jz9pz9kd73v5kL9if7UUbLp3cX3p7J0OG0lE6SqEUykgZKRNlosyUmRKUoCyUhbJSVspG2SgH5aBclItyU266hIkpD+WhJCUpH+Wj/JSfClJB8uSpCBWholSUilExKk7FqQSVoJJUkkpTabqD7qA76U4qT+XpLrqLKlElqkJVqCpVpWpUjapTdapBNagm1aRaVItqU22qQ3WoLtWlelSP6lN9akgNqTE1pibUhJpSU2pOzakFtaCW1JJaUStqTa2pDbWhttSW2lE7ak/tqQN1oE7UiTpTZ+pCXagbdaMe1IN6Uk/qTb2pL/WlftSP+lN/GkADaBANosE0mIbQEBpKw2g4vUUjaCSNotE0hsbSOBpH42k8TaAJNJEm0mSaTFNpKk2n6TSDZtAsmkWzaTbNoTk0j+bRAlpAC2khpVIqLabFtISW0DJaRitoBa2iVbSG1tA6WkcbaANtok20hbbQNtpGO2gH7aJdtIf20F7aS/toH+2n/XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kQKluAwuo7vKZXJXu8zuGvdf4xwup8vlbnC5nXXZXPa/ick5l98VcAVdIeddYVfE3fy7uKQr5Uq7Mu4OV9bd6cr9Lq66ZsevP4ju7nNV3N2uqrvHVXP3uuruPlfD3e9qukdcLfeoq+0auDqukavrHnH13KOuvmvgGrpGroV70rV0T7lW7mnX2j3zu3ihW+TWuLVunVvv9rpP3Tn3ozvqvnHn3U+ui+vq+rpXXD/3quvvXnMD3MDfxcPdW26EG+lGudFujBv7u3iym+KmumluunvPzXAzfxcvcB+62S7VzXFz3Tw3/5f4Uk+p7iO32H3slrilbplb7la4lW6VW/0fvS53G90mt9ntcZ+4bW672+F2ul1u9y/xpePY5z5z+93n7oj72h10X7hD7pg77L76Jb50fMfct+64+86dcCfdKfe9O+1+cGfc2V+O/9Kxf+9+dhddcMDIijUbjjgdp+cUzsAZ+SrOxFdzZr6GE3wtZ+HrOCtfz9k4O+fgnJyLb+DcbJnYMXPMeTgvJ/lGzsc3cX4uwAW5EHsuzEX4Zi7Kt3AxvpWL821cgm/nklyKS3MZvoPL8p1cjstzBb6LK3IlrsxV+G6uyvdwNb6Xq/N9XIPv55r8ANfiB7k2P8R1+GGuy49wPX6U63MDbsiNuDE/xk34cW7Kzbg5P8Et+EluyU9xK36aW/Mz3Iaf5bb8HLfj57k9v8AduCN34he5M7/EXbgrd+Pu3INf5p7ci3tzH+7Lr3A/fpX782s8gAfyIH6dB/MbPITf5KE8jIfzWzyCR/IoHs1jeCyP47d5PL/DE/hdnsiTeDJP4ak8jafzezyDZ/Isfp9n8wc8h+fyPJ7PC/hDXsiLOJU/4sX8MS/hpbyMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+GtvI23M/JO3sW7eQ9/wnv5U97Hn/F+/pwP8F/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kiB4YYYxXr2MRRnC5OH6fEGeKM8VVxpvjqOHN8TZyIr42zxNfFWePr42xx9jhHnDPOFd8Q545tTLGLOY7jPHHeOBnfGOeLb4rzxwXignGh2MeF4yLxzXHR+Ja4WHxrXDy+LS4R3x6XjEvFj9xXJr4jLhvfGZeLy8cV4rviinGluHJcJb47rhrfE1eL742rx/fFxeL745rxA3Gt+MG4dvxQXCd+OK4bPxLXix+N68cN4oZxo7hx/FjcJH48bho3i5vHT8Qt4ifjlvFTcav46bh1/Mwf7u8Wd497xC/HL8ch3KvnJecnFyQ/TC5MLkqmJj9KLk5+nFySXJpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNycDKFKevDoldfe+Min8+l9is/gM/qrfCZ/tc/sr/EJf63P4q/zWf31PpvP7nP4nD6Xv8Hn9taTd5597PP4vD7pb/T5/E0+vy/gC/pC3vvCvohv5Bv7xr6Jf9w39c18c/+Ef8I/6Z/0T/mn/NO+tX/Gt/HP+rb+Od/OP++f9y/4Dr6j7+Rf9J39S76L7+q7+W6+h+/he/qevrfv7fv6vr6f7+f7+/5+gB/gB/lBfrAf7If4IX6oH+qH++F+hB/hR/lRfowf48f5cX68H+8n+Al+op/oJ/vJfqqf6qf76X6Gn+Fn+Vl+dv7Zfo6f4+f5eX6BX+AX+oU+1af6xX6xX+KX+GV+mV/hV/hVfpVf49f4dX6d3+A3+E1+k9/it/htfpvf4Xf4XX6X3+P3+L1+r9/n9/n9fr8/4A+cC/6gP+S/9If9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf9MGPS7ydGJ94JzEh8W5iYmJSYnJiSmJqYlpieuK9xIzEzMSsxPuJ2YkPEnMScxPzEvMTCxIfJhYmFiVSEx8lFic+TixJLE0sSyxPrEisTIRww7Y45Al5QzLcGPKFm0L+UCAUDIWCD4VDkXBzKBpuCcXCraF4uC2UCLeHkqFUKB0eDfVDg9AwNAqNw2OhSXg8NA3NQvPwRGgRngwtw1OhVXg6tA7PhDbh2dA2PBfahedD+/BC6BA6hk7hxdA5vBS6BB26he6hR3g59Ay9Qu/QJ/QNr4R+4dXQP7wWBoSBYVB4PQwOb4Qh4c0wNAwLw8NbYUQYGUaF0WFMGBvGhbfD+PBOmBDeDRPDpDA5TAlTw7QwPbwXZoSZYVZ4P8wOH4Q5YW6YF+aHBeHDsDAsCqnho7A4fByWhKVhWVgeIGVlWBVWhzVhbVgX1ocNYWPYFDaHLWFr2Ba2hx1hZ9gVdoc94ZOwN3wa9oXPwv7weTgQ/hIOhi/CofBlOBy+CkfC1+Fo+CYcC9+G4+G7cCKcDKfC9+F0+CGcCWfDufBjOB9+ChfCz+Gi/M6aEEIIIcSfov9gf/e/idR//Kt++0gPALh6e87D/7Xmhmy/rnupXC0SAPB01/YP/XWrWLFbt26/PXaJhijvXABIXM5PB5fjpdAcnoRW0AyK/rf99VIdz/Mf1E/eBpDxP+WkwOX4cv1b/k79kbP/sP5cgPx5L+dkgMvx5frFflc7+qV+9iZ/UD/DF+MAmv6nvExwOb5cvwg8Ds9Aq795pBBCCCGEEEII8ateqnTbP7q+vXR9nstczkkPl+M/uj4XQgghhBBCCCHElfdcx05PPdaqVbO2f2dR/u/vkkVaWaT712jj334B8C/Rxp9bXOnvTEIIIYQQQoh/tssn/Ve6EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIu36f/HnxK70MQohhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBX2v8KAAD//6WkMbQ=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x800804, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=cp869,shortname=lower,utf8=1,shortname=lower,uni_xlate=0,chortname=utf8=0,utf8=0,codepage=863,nonumtail=0,iocharset=koi8-ru,iocharset=iso8859-2,shortname=win95,uni_xlate=0,\x00'/195], 0x1, 0x276, &(0x7f00000003c0)="$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") write$binfmt_script(r0, &(0x7f00000003c0), 0x104) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=732): socket$inet6_udplite(0x11, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x700, 0x1, 0x6, 0x8000, {{0x2f, 0x4, 0x0, 0x7, 0xbc, 0x68, 0x0, 0x1f, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x23, 0xec, [@rand_addr=0x64010101, @multicast1, @rand_addr=0x64010102, @broadcast, @loopback, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2b, 0x1, [{0x5, 0x10, "3ed22cbd3e359bfbce5b42d615dc"}, {0x1, 0x11, "d563ed526314970fff8e2b26de490b"}, {0x1, 0x4, "90c7"}]}, @cipso={0x86, 0xd, 0x2, [{0x2, 0x7, "33d8ac69d3"}]}, @generic={0x83, 0xe, "efbfac799a97a6e29c44e9e7"}, @timestamp_prespec={0x44, 0x14, 0x14, 0x3, 0x7, [{@multicast2, 0xcc07}, {@local, 0xfffffc19}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xc5, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@multicast1, 0x8cd9}, {@multicast2, 0x8}]}]}}}}}) kernel console output (not intermixed with test programs): ork, BSSID 50:50:50:50:50:50 [ 78.806728][ T4902] device veth1_vlan entered promiscuous mode [ 78.824215][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.828173][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.854221][ T635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.857003][ T635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.888658][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.891251][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.893545][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.918918][ T4902] device veth0_macvtap entered promiscuous mode [ 78.960207][ T4902] device veth1_macvtap entered promiscuous mode [ 79.026849][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.029134][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.036126][ T5124] loop4: detected capacity change from 0 to 512 [ 79.039440][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.041661][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.043817][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.046309][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.048244][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.054025][ T5125] loop3: detected capacity change from 0 to 1024 [ 79.075417][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.091004][ T4902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.095311][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.097545][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.102081][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.106986][ T5124] EXT4-fs (loop4): Ignoring removed bh option [ 79.110320][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.130966][ T5018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.149974][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.152326][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.154412][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.156575][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.197583][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.201699][ T5124] EXT4-fs (loop4): 1 truncate cleaned up [ 79.202955][ T5124] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 79.218571][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.250431][ T4902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.252721][ T4902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.256915][ T4902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.275720][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.293537][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.313570][ T4902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.315412][ T4902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.317164][ T4902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.318939][ T4902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.320467][ T5119] loop1: detected capacity change from 0 to 32768 [ 79.350553][ T4028] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /66/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 79.364898][ T5018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.417917][ T4028] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 79.436143][ T4028] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 79.439141][ T5119] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 79.525137][ T5018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.584697][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.586576][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.617770][ T4027] ocfs2: Unmounting device (7,1) on (node local) [ 79.621937][ T5018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.639833][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.742367][ T5138] loop3: detected capacity change from 0 to 2048 [ 79.747195][ T4678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.748944][ T4678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.754244][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.781425][ T5138] UDF-fs: bad mount option "18446744073709551615È·W%œ`âòn"ð…‡D‡Šc4æm§(Þ̱õ_úн(Ü›‚šT"jÈ®ï¢(ÿØ´Û.m)b2³šù" or missing value [ 79.873665][ T4865] Bluetooth: hci3: command 0x040f tx timeout [ 79.900219][ T5018] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.953306][ T5143] loop0: detected capacity change from 0 to 512 [ 79.983487][ T5018] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.025643][ T5143] EXT4-fs (loop0): Ignoring removed orlov option [ 80.026979][ T5143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.030456][ T4865] Bluetooth: hci2: command 0x0405 tx timeout [ 80.030961][ T5018] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.053132][ T5143] EXT4-fs (loop0): 1 truncate cleaned up [ 80.054420][ T5143] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 80.081576][ T5018] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.131331][ T5141] loop1: detected capacity change from 0 to 32768 [ 80.180857][ T5141] XFS: attr2 mount option is deprecated. [ 80.182079][ T5141] XFS: ikeep mount option is deprecated. [ 80.183219][ T5141] XFS: noikeep mount option is deprecated. [ 80.224047][ T5141] XFS (loop1): Mounting V5 Filesystem [ 80.231435][ T5143] EXT4-fs (loop0): shut down requested (2) [ 80.310383][ T5141] XFS (loop1): Ending clean mount [ 80.316869][ T5141] XFS (loop1): Quotacheck needed: Please wait. [ 80.440490][ T5018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.464113][ T5018] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.466032][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.485998][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.549372][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.552038][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.554142][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.555589][ T4749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.592140][ T5141] XFS (loop1): Quotacheck: Done. [ 80.608936][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.611965][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.614295][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.620320][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.621974][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.626965][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.635136][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.756346][ T4027] XFS (loop1): Unmounting Filesystem [ 80.767761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.778189][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.826346][ T5018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.828482][ T5018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.837544][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.841228][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.845918][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.848398][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.851394][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.853902][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.856195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.858761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.909335][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.911369][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.913158][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.940315][ T5177] block nbd3: server does not support multiple connections per device. [ 80.944140][ T5176] block nbd3: shutting down sockets [ 81.107392][ T5154] chnl_net:caif_netlink_parms(): no params data found [ 81.479704][ T5018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.481544][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.483387][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.486587][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.488150][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.500410][ T5154] device bridge_slave_0 entered promiscuous mode [ 81.510148][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.511788][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.514085][ T5154] device bridge_slave_1 entered promiscuous mode [ 81.626104][ T5154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.639802][ T5154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.700240][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.702908][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.705462][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.710664][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.729237][ T5018] device veth0_vlan entered promiscuous mode [ 81.739944][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.742205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.752821][ T5154] team0: Port device team_slave_0 added [ 81.755616][ T5018] device veth1_vlan entered promiscuous mode [ 81.795282][ T5154] team0: Port device team_slave_1 added [ 81.859221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.875887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.890873][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.892511][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.898177][ T5154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.921250][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.922972][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.928337][ T5154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.949078][ T5192] loop3: detected capacity change from 0 to 32768 [ 81.951114][ T4866] Bluetooth: hci3: command 0x0419 tx timeout [ 81.963950][ T5018] device veth0_macvtap entered promiscuous mode [ 81.966168][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.968657][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.981958][ T5018] device veth1_macvtap entered promiscuous mode [ 81.990955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.993236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.010432][ T5192] XFS: attr2 mount option is deprecated. [ 82.011674][ T5192] XFS: ikeep mount option is deprecated. [ 82.012777][ T5192] XFS: noikeep mount option is deprecated. [ 82.120731][ T5192] XFS (loop3): Mounting V5 Filesystem [ 82.141811][ T5154] device hsr_slave_0 entered promiscuous mode [ 82.180197][ T5154] device hsr_slave_1 entered promiscuous mode [ 82.201769][ T5198] loop0: detected capacity change from 0 to 32768 [ 82.229650][ T5154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.231516][ T5154] Cannot create hsr debugfs directory [ 82.233171][ T5201] loop1: detected capacity change from 0 to 40427 [ 82.233186][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.236750][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.245549][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.248042][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.261087][ T5198] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.317 (5198) [ 82.275868][ T5192] XFS (loop3): Ending clean mount [ 82.278263][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.281917][ T5192] XFS (loop3): Quotacheck needed: Please wait. [ 82.298553][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.307827][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.311683][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.313634][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.315841][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.334738][ T5192] XFS (loop3): Quotacheck: Done. [ 82.338955][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.349586][ T5201] F2FS-fs (loop1): invalid crc value [ 82.369459][ T4076] Bluetooth: hci1: command 0x0409 tx timeout [ 82.373022][ T5201] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.393866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.396331][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.414265][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.416582][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.418857][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.422097][ T5198] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 82.423905][ T5198] BTRFS info (device loop0): disabling tree log [ 82.425213][ T5198] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 82.427420][ T5198] BTRFS info (device loop0): trying to use backup root at mount time [ 82.440736][ T5201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.443147][ T5198] BTRFS info (device loop0): setting nodatacow, compression disabled [ 82.444827][ T5198] BTRFS info (device loop0): enabling ssd optimizations [ 82.446250][ T5198] BTRFS info (device loop0): using spread ssd allocation scheme [ 82.447755][ T5198] BTRFS info (device loop0): using free space tree [ 82.449073][ T5198] BTRFS info (device loop0): has skinny extents [ 82.449886][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.463623][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.465894][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.467932][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.499557][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.501752][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.503915][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.520109][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.537718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.540239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.559219][ T4855] XFS (loop3): Unmounting Filesystem [ 82.656214][ T4027] attempt to access beyond end of device [ 82.656214][ T4027] loop1: rw=2049, want=45104, limit=40427 [ 82.684965][ T5018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.686928][ T5018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.698596][ T5018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.701499][ T5018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.938532][ T5154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.053830][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.055638][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.060642][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.137877][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.152001][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.285364][ T5154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.293956][ T5241] input: syz0 as /devices/virtual/input/input3 [ 83.296457][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.329002][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 83.355727][ T5154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.437916][ T5247] loop3: detected capacity change from 0 to 256 [ 83.472933][ T5154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.480797][ T5247] exfat: Deprecated parameter 'utf8' [ 83.482077][ T5247] exfat: Deprecated parameter 'namecase' [ 83.483441][ T5247] exfat: Deprecated parameter 'utf8' [ 83.484615][ T5247] exfat: Deprecated parameter 'namecase' [ 83.514186][ T5247] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 83.745958][ T5154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.791500][ T5154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.862075][ T5154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.874687][ T5258] loop3: detected capacity change from 0 to 4096 [ 83.881442][ T5258] __ntfs_warning: 12 callbacks suppressed [ 83.881456][ T5258] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 83.882760][ T5154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.946857][ T5258] ntfs: volume version 3.1. [ 83.962126][ T5239] loop0: detected capacity change from 0 to 32768 [ 84.023060][ T5239] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.320 (5239) [ 84.029681][ T4258] Bluetooth: hci3: command 0x0411 tx timeout [ 84.133069][ T5239] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 84.135234][ T5239] BTRFS info (device loop0): turning off barriers [ 84.137890][ T5239] BTRFS info (device loop0): unrecognized rescue option 'ignoresuperflags' [ 84.143601][ T5239] BTRFS error (device loop0): unrecognized rescue value ignoresuperflags [ 84.161676][ T5239] BTRFS error (device loop0): open_ctree failed [ 84.207699][ T4019] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (4019) [ 84.212610][ T5256] loop1: detected capacity change from 0 to 32768 [ 84.285543][ T5260] loop3: detected capacity change from 0 to 8192 [ 84.301994][ T5256] ERROR: (device loop1): diAllocBit: iag inconsistent [ 84.301994][ T5256] [ 84.314529][ T5256] ialloc: diAlloc returned -5! [ 84.323740][ T5260] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 84.325833][ T5260] REISERFS (device loop3): using ordered data mode [ 84.327203][ T5260] reiserfs: using flush barriers [ 84.330124][ T5260] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.334972][ T5260] REISERFS (device loop3): checking transaction log (loop3) [ 84.341838][ T5260] REISERFS (device loop3): Using r5 hash to sort names [ 84.343304][ T5260] REISERFS (device loop3): using 3.5.x disk format [ 84.345561][ T5260] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 84.429869][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 84.430883][ T5264] loop2: detected capacity change from 0 to 1024 [ 84.618426][ T5154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.667525][ T5268] loop1: detected capacity change from 0 to 256 [ 84.684891][ T5154] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.686734][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.696246][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.717014][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.720259][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.722534][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.724161][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.740734][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.753346][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 84.977674][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.980097][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.982190][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.983670][ T4678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.985657][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.016416][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.031997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.036307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.057737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.094503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.097157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.144149][ T5287] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 85.154153][ T5287] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 85.158120][ T5287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.338'. [ 85.168491][ T5287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.338'. [ 85.181080][ T5154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.183468][ T5154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.204911][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.207471][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.210810][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.212948][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.215136][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.617434][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.619095][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.646988][ T5274] loop3: detected capacity change from 0 to 32768 [ 85.672877][ T5154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.685701][ T5274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.330 (5274) [ 85.749708][ T5274] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 85.751801][ T5274] BTRFS info (device loop3): setting nodatacow, compression disabled [ 85.753530][ T5274] BTRFS info (device loop3): turning on flush-on-commit [ 85.755017][ T5274] BTRFS info (device loop3): enabling auto defrag [ 85.756422][ T5274] BTRFS info (device loop3): max_inline at 0 [ 85.757654][ T5274] BTRFS info (device loop3): using free space tree [ 85.788318][ T5274] BTRFS info (device loop3): has skinny extents [ 86.051469][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.054109][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.058380][ T5274] BTRFS info (device loop3): enabling ssd optimizations [ 86.074833][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.077236][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.080280][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.083311][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.088295][ T5154] device veth0_vlan entered promiscuous mode [ 86.098287][ T5154] device veth1_vlan entered promiscuous mode [ 86.123585][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.125974][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.128346][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.132510][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.144247][ T5154] device veth0_macvtap entered promiscuous mode [ 86.152007][ T5154] device veth1_macvtap entered promiscuous mode [ 86.174172][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.176684][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.179058][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.185547][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.187841][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.193363][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.195726][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.198060][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.201850][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.204135][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.214051][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.216436][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.263056][ T5329] loop0: detected capacity change from 0 to 1024 [ 86.272156][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.276319][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.278630][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.286104][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.288586][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.297418][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.300304][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.302467][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.304699][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.317103][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.319206][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.324698][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.327087][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.329950][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.332053][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.340368][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.342720][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.347368][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.427288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.429830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.435076][ T5154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.437145][ T5154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.438902][ T5154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.452491][ T5154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.510066][ T5237] Bluetooth: hci1: command 0x040f tx timeout [ 86.686476][ T290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.689881][ T290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.785567][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.808605][ T4678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.810693][ T4678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.821756][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.076726][ T5342] loop0: detected capacity change from 0 to 2048 [ 87.078972][ T5342] UDF-fs: bad mount option "18446744073709551615È·W%œ`âòn"ð…‡D‡Šc4æm§(Þ̱õ_úн(Ü›‚šT"jÈ®ï¢(ÿØ´Û.m)b2³šù" or missing value [ 87.397724][ T5336] loop1: detected capacity change from 0 to 32768 [ 87.494842][ T5344] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 87.588608][ T5336] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 87.590602][ T5336] BTRFS info (device loop1): turning off barriers [ 87.591931][ T5336] BTRFS info (device loop1): unrecognized rescue option 'ignoresuperflags' [ 87.593835][ T5336] BTRFS error (device loop1): unrecognized rescue value ignoresuperflags [ 87.629081][ T5334] loop3: detected capacity change from 0 to 40427 [ 87.657501][ T5336] BTRFS error (device loop1): open_ctree failed [ 87.680041][ T5334] F2FS-fs (loop3): invalid crc value [ 87.714298][ T5334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.778955][ T5334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.912616][ T4855] attempt to access beyond end of device [ 87.912616][ T4855] loop3: rw=2049, want=45104, limit=40427 [ 88.010488][ T5341] loop4: detected capacity change from 0 to 40427 [ 88.118813][ T5341] F2FS-fs (loop4): invalid crc value [ 88.153391][ T5341] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.231306][ T5341] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 88.240507][ T5341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.300095][ T5341] attempt to access beyond end of device [ 88.300095][ T5341] loop4: rw=2049, want=45640, limit=40427 [ 88.356262][ T5341] attempt to access beyond end of device [ 88.356262][ T5341] loop4: rw=2049, want=45640, limit=40427 [ 88.485690][ T5349] loop0: detected capacity change from 0 to 32768 [ 88.497055][ T5154] attempt to access beyond end of device [ 88.497055][ T5154] loop4: rw=2049, want=45648, limit=40427 [ 88.499822][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.501421][ T379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.520232][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.521930][ T379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.559109][ T5349] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.560538][ T379] batman_adv: batadv0: Removing interface: macvtap1 [ 88.590227][ T5237] Bluetooth: hci1: command 0x0419 tx timeout [ 88.590836][ T379] device bridge_slave_1 left promiscuous mode [ 88.592985][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.661460][ T379] device bridge_slave_0 left promiscuous mode [ 88.662767][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.676028][ T5368] loop1: detected capacity change from 0 to 256 [ 88.706263][ T4902] ocfs2: Unmounting device (7,0) on (node local) [ 88.727660][ T379] device hsr_slave_0 left promiscuous mode [ 88.751909][ T5368] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.757530][ T5368] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.778496][ T379] device hsr_slave_1 left promiscuous mode [ 88.849772][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.851446][ T379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.853991][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.855722][ T379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.862533][ T379] device bridge_slave_1 left promiscuous mode [ 88.867470][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.920754][ T379] device bridge_slave_0 left promiscuous mode [ 88.922232][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.053957][ C1] vxcan0: j1939_tp_rxtimer: 0x000000003339c243: rx timeout, send abort [ 89.088621][ T5358] loop2: detected capacity change from 0 to 32768 [ 89.130019][ T379] device veth1_macvtap left promiscuous mode [ 89.131423][ T379] device veth0_macvtap left promiscuous mode [ 89.132817][ T379] device veth1_vlan left promiscuous mode [ 89.134162][ T379] device veth0_vlan left promiscuous mode [ 89.152976][ T5358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.353 (5358) [ 89.193998][ T5358] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 89.195925][ T5358] BTRFS info (device loop2): setting nodatacow, compression disabled [ 89.197610][ T5358] BTRFS info (device loop2): turning on flush-on-commit [ 89.199328][ T5358] BTRFS info (device loop2): enabling auto defrag [ 89.203179][ T5358] BTRFS info (device loop2): max_inline at 0 [ 89.204478][ T5358] BTRFS info (device loop2): using free space tree [ 89.205901][ T5358] BTRFS info (device loop2): has skinny extents [ 89.210496][ T379] device veth1_macvtap left promiscuous mode [ 89.211846][ T379] device veth0_macvtap left promiscuous mode [ 89.213270][ T379] device veth1_vlan left promiscuous mode [ 89.214537][ T379] device veth0_vlan left promiscuous mode [ 89.317136][ T5358] BTRFS info (device loop2): enabling ssd optimizations [ 89.556240][ C1] vxcan0: j1939_tp_rxtimer: 0x000000003339c243: abort rx timeout. Force session deactivation [ 89.680594][ T5402] 9pnet: p9_errstr2errno: server reported unknown error õ’ôD€B inodes count - block_group = 0,inode=18 [ 125.568474][ T5786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5786) [ 125.631474][ T6570] loop0: detected capacity change from 0 to 4096 [ 125.672409][ T6553] EXT2-fs (loop1): error: ext2_fsync: detected IO error when writing metadata buffers [ 125.693079][ T6570] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 125.762233][ T6552] EXT2-fs (loop1): error: ext2_get_inode: bad inode number: 15 [ 125.782933][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1803188595, count = 1 [ 125.812091][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1701604449, count = 1 [ 125.827634][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 [ 125.840430][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 218, count = 1 [ 125.853510][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 15, count = 1 [ 125.866922][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 125, count = 1 [ 125.880277][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 131072, count = 1 [ 125.892616][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 2, count = 1 [ 125.897202][ T6552] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1, count = 1 [ 125.907455][ T6552] EXT2-fs (loop1): error: ext2_free_inode: reserved or nonexistent inode 15 [ 125.968912][ T148] EXT2-fs (loop1): error: ext2_get_inode: bad inode number: 2 [ 126.053888][ T6583] loop1: detected capacity change from 0 to 64 [ 126.700421][ T6618] loop4: detected capacity change from 0 to 128 [ 126.817889][ T6621] loop1: detected capacity change from 0 to 8192 [ 126.865195][ T6618] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.876577][ T6618] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.100530][ T668] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.267701][ T6599] loop2: detected capacity change from 0 to 32768 [ 127.271497][ T6626] overlayfs: failed to verify upper (21/file2, ino=140, err=-116) [ 127.273214][ T6626] overlayfs: failed to verify index dir 'upper' xattr [ 127.274652][ T6626] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 127.300365][ T4081] libceph: connect (1)[c::]:6789 error -101 [ 127.302218][ T4081] libceph: mon0 (1)[c::]:6789 connect error [ 127.326683][ T4081] libceph: connect (1)[c::]:6789 error -101 [ 127.328101][ T4081] libceph: mon0 (1)[c::]:6789 connect error [ 127.476543][ T6636] loop3: detected capacity change from 0 to 1024 [ 127.595172][ T4258] libceph: connect (1)[c::]:6789 error -101 [ 127.596646][ T4258] libceph: mon0 (1)[c::]:6789 connect error [ 127.875743][ T5237] vhci_hcd: vhci_device speed not set [ 127.927385][ T6599] XFS (loop2): Mounting V5 Filesystem [ 128.044813][ T6628] ceph: No mds server is up or the cluster is laggy [ 128.099805][ T4081] libceph: connect (1)[c::]:6789 error -101 [ 128.101365][ T4081] libceph: mon0 (1)[c::]:6789 connect error [ 128.200694][ T6599] XFS (loop2): Ending clean mount [ 128.204037][ T6599] XFS (loop2): Quotacheck needed: Please wait. [ 128.241933][ T6634] loop1: detected capacity change from 0 to 40427 [ 128.263300][ T6648] loop3: detected capacity change from 0 to 8 [ 128.284161][ T6634] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 128.286251][ T6634] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.317746][ T6622] loop0: detected capacity change from 0 to 262144 [ 128.341598][ T6648] SQUASHFS error: lzo decompression failed, data probably corrupt [ 128.344880][ T6634] F2FS-fs (loop1): invalid crc value [ 128.345014][ T6648] SQUASHFS error: Failed to read block 0x28d: -5 [ 128.353747][ T6634] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.366307][ T6622] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.694 (6622) [ 128.367746][ T6648] SQUASHFS error: Unable to read metadata cache entry [28b] [ 128.382795][ T6634] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.384370][ T6634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.389973][ T6648] SQUASHFS error: Unable to read inode 0x11f [ 128.424310][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 128.424326][ T26] audit: type=1326 audit(128.390:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.4.702" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff854759a8 code=0x0 [ 128.453550][ T6599] XFS (loop2): Quotacheck: Done. [ 128.457728][ T6622] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 128.459739][ T6622] BTRFS info (device loop0): using free space tree [ 128.461205][ T6622] BTRFS info (device loop0): has skinny extents [ 128.462539][ T6622] BTRFS info (device loop0): flagging fs with big metadata feature [ 128.475896][ T26] audit: type=1326 audit(128.440:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.4.702" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=436 compat=0 ip=0xffff854759a8 code=0x0 [ 128.586662][ T5018] XFS (loop2): Unmounting Filesystem [ 128.708058][ T4027] attempt to access beyond end of device [ 128.708058][ T4027] loop1: rw=524288, want=45072, limit=40427 [ 128.714197][ T4027] attempt to access beyond end of device [ 128.714197][ T4027] loop1: rw=0, want=45072, limit=40427 [ 128.825262][ T6622] BTRFS info (device loop0): enabling ssd optimizations [ 128.832382][ T9] attempt to access beyond end of device [ 128.832382][ T9] loop1: rw=2049, want=45112, limit=40427 [ 129.093357][ T6679] loop3: detected capacity change from 0 to 64 [ 129.251293][ T6681] loop2: detected capacity change from 0 to 2048 [ 129.434543][ T6681] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 129.436237][ T6681] UDF-fs: Scanning with blocksize 512 failed [ 129.485048][ T6681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.742687][ T6692] loop3: detected capacity change from 0 to 256 [ 129.814876][ T6681] attempt to access beyond end of device [ 129.814876][ T6681] loop2: rw=2049, want=2050, limit=2048 [ 129.830260][ T6681] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 129.837042][ T6681] attempt to access beyond end of device [ 129.837042][ T6681] loop2: rw=2049, want=2050, limit=2048 [ 129.847630][ T6681] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 129.862541][ T6681] attempt to access beyond end of device [ 129.862541][ T6681] loop2: rw=2049, want=2050, limit=2048 [ 129.866528][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.874244][ T6681] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 129.883042][ T6681] attempt to access beyond end of device [ 129.883042][ T6681] loop2: rw=2049, want=2050, limit=2048 [ 129.889172][ T6681] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 129.906504][ T6681] attempt to access beyond end of device [ 129.906504][ T6681] loop2: rw=2049, want=2052, limit=2048 [ 129.909073][ T6681] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 129.916958][ T6681] attempt to access beyond end of device [ 129.916958][ T6681] loop2: rw=2049, want=2052, limit=2048 [ 129.949613][ T6681] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 129.951644][ T6681] attempt to access beyond end of device [ 129.951644][ T6681] loop2: rw=2049, want=2052, limit=2048 [ 129.997229][ T6681] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 129.998995][ T6681] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 130.021070][ T6681] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 130.053759][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.191738][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.307142][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.603739][ T6706] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.651952][ T6700] chnl_net:caif_netlink_parms(): no params data found [ 130.760799][ T6706] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.935931][ T6696] loop3: detected capacity change from 0 to 32768 [ 130.985118][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.986906][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.016493][ T6700] device bridge_slave_0 entered promiscuous mode [ 131.038272][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.045001][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.047382][ T6700] device bridge_slave_1 entered promiscuous mode [ 131.067160][ T6696] XFS (loop3): Mounting V5 Filesystem [ 131.070854][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.072407][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.187569][ T6696] XFS (loop3): Ending clean mount [ 131.227132][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.270437][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.390450][ T6738] input: syz1 as /devices/virtual/input/input5 [ 131.398333][ T4258] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 131.400411][ T6736] loop0: detected capacity change from 0 to 1024 [ 131.412662][ T4258] XFS (loop3): Unmount and run xfs_repair [ 131.413957][ T4258] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 131.415504][ T4258] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 131.433904][ T4258] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 131.435918][ T4258] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 131.437771][ T4258] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 131.457241][ T4258] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 131.459146][ T4258] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.476600][ T4258] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.478391][ T4258] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.484318][ T6696] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 131.509230][ T6700] team0: Port device team_slave_0 added [ 131.521388][ T6696] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 131.524586][ T6696] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 131.526120][ T6700] team0: Port device team_slave_1 added [ 131.609775][ T6742] loop2: detected capacity change from 0 to 256 [ 131.613993][ T4678] hfsplus: b-tree write err: -5, ino 4 [ 131.617009][ T6044] XFS (loop3): Unmounting Filesystem [ 131.635532][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.637389][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.650308][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.662698][ T6742] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 131.666206][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.667838][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.679573][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.717320][ T6730] ================================================================== [ 131.719447][ T6730] BUG: KASAN: use-after-free in xfs_iflush_cluster+0x9c/0x113c [ 131.721089][ T6730] Read of size 8 at addr ffff0000e6b93550 by task xfsaild/loop3/6730 [ 131.722817][ T6730] [ 131.723445][ T6730] CPU: 1 PID: 6730 Comm: xfsaild/loop3 Not tainted 5.15.167-syzkaller #0 [ 131.725160][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.727023][ T6730] Call trace: [ 131.727639][ T6730] dump_backtrace+0x0/0x530 [ 131.728619][ T6730] show_stack+0x2c/0x3c [ 131.729504][ T6730] dump_stack_lvl+0x108/0x170 [ 131.730533][ T6730] print_address_description+0x7c/0x3f0 [ 131.731700][ T6730] kasan_report+0x174/0x1e4 [ 131.732690][ T6730] __asan_report_load8_noabort+0x44/0x50 [ 131.734142][ T6730] xfs_iflush_cluster+0x9c/0x113c [ 131.735436][ T6730] xfs_inode_item_push+0x190/0x28c [ 131.736590][ T6730] xfsaild+0xb58/0x2bfc [ 131.737529][ T6730] kthread+0x37c/0x45c [ 131.738531][ T6730] ret_from_fork+0x10/0x20 [ 131.739442][ T6730] [ 131.740089][ T6730] Allocated by task 6696: [ 131.741040][ T6730] __kasan_slab_alloc+0x8c/0xcc [ 131.742192][ T6730] slab_post_alloc_hook+0x74/0x3f4 [ 131.743292][ T6730] kmem_cache_alloc+0x1dc/0x45c [ 131.744325][ T6730] xfs_inode_item_init+0x3c/0xc0 [ 131.745528][ T6730] xfs_trans_ijoin+0xc4/0xe8 [ 131.746534][ T6730] xfs_init_new_inode+0xa50/0xd58 [ 131.747728][ T6730] xfs_create+0x754/0xfec [ 131.748684][ T6730] xfs_generic_create+0x390/0xb10 [ 131.749898][ T6730] xfs_vn_mkdir+0x44/0x58 [ 131.750836][ T6730] vfs_mkdir+0x334/0x4e4 [ 131.751733][ T6730] do_mkdirat+0x20c/0x610 [ 131.752710][ T6730] __arm64_sys_mkdirat+0x90/0xa8 [ 131.753742][ T6730] invoke_syscall+0x98/0x2b8 [ 131.754857][ T6730] el0_svc_common+0x138/0x258 [ 131.755774][ T6730] do_el0_svc+0x58/0x14c [ 131.756656][ T6730] el0_svc+0x7c/0x1f0 [ 131.757682][ T6730] el0t_64_sync_handler+0x84/0xe4 [ 131.758714][ T6730] el0t_64_sync+0x1a0/0x1a4 [ 131.759814][ T6730] [ 131.760383][ T6730] Freed by task 6201: [ 131.761341][ T6730] kasan_set_track+0x4c/0x84 [ 131.762351][ T6730] kasan_set_free_info+0x28/0x4c [ 131.763457][ T6730] ____kasan_slab_free+0x118/0x164 [ 131.764610][ T6730] __kasan_slab_free+0x18/0x28 [ 131.765629][ T6730] slab_free_freelist_hook+0x128/0x1ec [ 131.766952][ T6730] kmem_cache_free+0xdc/0x3c4 [ 131.768113][ T6730] xfs_inode_item_destroy+0x80/0x94 [ 131.769262][ T6730] xfs_inode_free_callback+0x1c4/0x240 [ 131.770574][ T6730] rcu_core+0x830/0x1b34 [ 131.771540][ T6730] rcu_core_si+0x10/0x1c [ 131.772622][ T6730] handle_softirqs+0x384/0xdbc [ 131.773809][ T6730] __irq_exit_rcu+0x268/0x4d8 [ 131.774775][ T6730] irq_exit+0x14/0x88 [ 131.775679][ T6730] handle_domain_irq+0xf4/0x178 [ 131.776853][ T6730] gic_handle_irq+0x78/0x1c8 [ 131.777907][ T6730] [ 131.778422][ T6730] The buggy address belongs to the object at ffff0000e6b93500 [ 131.778422][ T6730] which belongs to the cache xfs_ili of size 256 [ 131.781490][ T6730] The buggy address is located 80 bytes inside of [ 131.781490][ T6730] 256-byte region [ffff0000e6b93500, ffff0000e6b93600) [ 131.784376][ T6730] The buggy address belongs to the page: [ 131.785719][ T6730] page:00000000938d79fa refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000e6b93a00 pfn:0x126b93 [ 131.788336][ T6730] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 131.790361][ T6730] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c6231980 [ 131.792224][ T6730] raw: ffff0000e6b93a00 00000000800c0005 00000001ffffffff 0000000000000000 [ 131.794270][ T6730] page dumped because: kasan: bad access detected [ 131.795714][ T6730] [ 131.796242][ T6730] Memory state around the buggy address: [ 131.797473][ T6730] ffff0000e6b93400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.799307][ T6730] ffff0000e6b93480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 131.801364][ T6730] >ffff0000e6b93500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.803259][ T6730] ^ [ 131.804727][ T6730] ffff0000e6b93580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.806450][ T6730] ffff0000e6b93600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 131.808278][ T6730] ================================================================== [ 131.810212][ T6730] Disabling lock debugging due to kernel taint [ 131.872214][ T6700] device hsr_slave_0 entered promiscuous mode [ 131.929957][ T6700] device hsr_slave_1 entered promiscuous mode [ 131.950458][ T6700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.952262][ T6700] Cannot create hsr debugfs directory [ 132.269488][ T4081] Bluetooth: hci0: command 0x0409 tx timeout [ 132.472940][ T148] device hsr_slave_0 left promiscuous mode [ 132.510285][ T148] device hsr_slave_1 left promiscuous mode [ 132.599594][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.601267][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.603400][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.605011][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.610987][ T148] device bridge_slave_1 left promiscuous mode [ 132.612297][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.660621][ T148] device bridge_slave_0 left promiscuous mode [ 132.662167][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.789708][ T148] device veth1_macvtap left promiscuous mode [ 132.791105][ T148] device veth0_macvtap left promiscuous mode [ 132.792625][ T148] device veth1_vlan left promiscuous mode [ 132.794109][ T148] device veth0_vlan left promiscuous mode [ 132.975645][ T148] team0 (unregistering): Port device team_slave_1 removed [ 132.985328][ T148] team0 (unregistering): Port device team_slave_0 removed [ 132.997632][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.036165][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.195078][ T148] bond0 (unregistering): Released all slaves [ 133.419148][ T6700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.451713][ T6700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.491980][ T6700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.521917][ T6700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.644448][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.665596][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.667700][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.673134][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.677385][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.680094][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.682463][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.684005][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.693940][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.696197][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.698469][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.707412][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.709046][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.713425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.729233][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.732015][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.734420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.736712][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.739223][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.752908][ T6700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.755352][ T6700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.761223][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.763527][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.766655][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.769163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.778738][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.786296][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.884056][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.885825][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.902567][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.927694][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.931656][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.962375][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.964720][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.967213][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.970903][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.977036][ T6700] device veth0_vlan entered promiscuous mode [ 133.987569][ T6700] device veth1_vlan entered promiscuous mode [ 134.027603][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.031859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.034175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.037897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.054058][ T6700] device veth0_macvtap entered promiscuous mode [ 134.058153][ T6700] device veth1_macvtap entered promiscuous mode [ 134.078267][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.084610][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.086798][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.089226][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.093202][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.096791][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.099124][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.105577][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.113994][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.116264][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.119373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.124616][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.127359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.134563][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.136822][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.138802][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.151730][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.153805][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.155881][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.157864][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.171604][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.194022][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.196381][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.198754][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.251105][ T6700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.252975][ T6700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.254729][ T6700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.256432][ T6700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.323635][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.325370][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.333897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.349745][ T4077] Bluetooth: hci0: command 0x041b tx timeout [ 134.351386][ T4678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.353100][ T4678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.354880][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.431129][ T4442] Bluetooth: hci0: command 0x040f tx timeout [ 138.509808][ T4442] Bluetooth: hci0: command 0x0419 tx timeout