last executing test programs: 21.887007745s ago: executing program 3 (id=825): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 21.705633821s ago: executing program 3 (id=826): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r5, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000400)="3d9c7e9dd799fe2bb80020307877a48044b9f07025b476cc9127b6e1eff4f9fa6fa5537f1aea08d69d9bcdf479048f3555947e65a377a8001e3d8bf10f2e7a5daf50d19abf0157125c572b167da5e9127a51b71df10300000000000000413f6351ea9269253f916aeb15306392cd85d7cb00825ad0147d32", 0x78}, {&(0x7f00000009c0)="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", 0x12a}], 0x3, 0xf1, 0x5) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000800)=0x2) r6 = dup(r5) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000008c0)={0x3f, 0x7, 0x6}) write$nbd(r6, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000000c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c80)="a85e2ee4619fdebb42dec9e5fd6a63541d0b6a2cd8572f61a3a36c52b87eb43afa0240dd8793e2bd2daee1902275da55eceb3870dc8bf4ca25f022061aa5e6945a83df3f3b67a4326e99cbd5e1ac91ca1cc2a071d3d6f163d90100001000000000b1492d6b0cff875a2f044cdab789c10004000013a15d5d99059a6d30ee1147982e5448ba62daff2a5069403fb21875c41b0233cd2e886cd51e8a7b7180fc15161342fc0775", 0xa6}, {&(0x7f0000000680)="3a75b19fb2be2d5b3fd46b18754c3c1aba9086251e7c4d40751093005e4e5d9c1ef3421eee1a7d73c14f83ff56382c3433778b25d2c36bf6bff13a2a662dd9557bb0f5217133c7d80dc25e0afcd4841103f5da4af2a86d392615aefbbccc632afd0626c3a37278c4be50aca0b5974b8c56669e079fc331b1175e04b45f6a2054b60aa3ccececf117a4b8b3ef6f818014854d", 0x92}, {&(0x7f0000002e00)="b201c54f415df9915611b8f46a", 0xd}], 0x3, &(0x7f0000002e80)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="00000000069e4f64000200000000000000000000795b5c0d1311d5a318974b5720bfe1db0f17d130f0000075f337049d3af285a2df03f95ff8616f49b0e0", @ANYRES64=r4, @ANYRESHEX=r2, @ANYRES64, @ANYRES8=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRES64=r5, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r5, @ANYBLOB="8bbacb2a36d9082809d8c368170011480e59d46840c387a4a87641ffd9411cff6f354eec27aac5c52b2bd77888568e66c6d1c05f8d940d5d51703872eb3cbf9fcb6b9bef6997afc3e38ace351c29c33011b74c323d1c619665064545bfcc52b119f3e00da22db02075b824418d2d853d6931571cc426912db28a54ee87a9c55483287470b4420b0a3f03b6574009917b3f036f69cbc847de724864851e3c3f8969000000000000000000000000000000000000000000000000005c9774ebe86449178ba18bb2821d316f9542945bba1a0f2dc6b05d4c48e2ce9d21de406cde9cb9a35f1359931eead50deafd87f547b4305c9e9417ba2efc81625e79016e720000", @ANYRESHEX, @ANYRES16=r3, @ANYRES32, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES16, @ANYBLOB="020000000200000000000000ee1c5a53e1070075e86b3590bbf967035b", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRESOCT=r6, @ANYRES64=r6, @ANYRES64=r5, @ANYRES64, @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r5, @ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYBLOB="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", @ANYRES8, @ANYBLOB="00090400b444abdfa4b6b530d9c9f06fae8a3a75a937bb4cc5d2248da163e61d470ed70303ac5c8840a581135b7b340d941d4fe975e35eeb2b4d3153260b2020b13696a711d40eb7a385a302844c54469bdd54ecfce6f3c41ad7ed35651202ee44e1a3c2d72c7164f312519454c32cd22584e56cae9106414254a9a7510ab8423791f59fade46aaf10d94574871fc544dde616c23595aead626c5dfced0bffa47280ad2182d72b720f05f6a6206494006c7cbb07cf7dc819ad914219b24a8bc4d857f0ce816abbe245c55171d6390b64c6a722501cb47d41"], 0x158, 0x200cc811}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r7, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000002840)={&(0x7f0000002780), 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, r7, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r7, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xc49, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000404}, 0x4010) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r9, @ANYBLOB="cc"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000006a00020025bd7000fcdbdf250a0000000000000008000500", @ANYRES32=r9, @ANYBLOB="04000900080001800000000008010a0000ecffff07000100fd000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000010) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004000000", 0x58}], 0x1) 20.198541954s ago: executing program 2 (id=830): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x4000086e, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./bus\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000080)='./bus\x00', r6, &(0x7f0000001240)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef0101"], 0x0) getpid() 20.198166224s ago: executing program 3 (id=831): socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e2, &(0x7f00000006c0)="$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") socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x11, 0x693, &(0x7f0000000880)="$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") add_key(0x0, 0x0, &(0x7f0000000580)="fb9c", 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000c00)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80085504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa4fe385000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.183203055s ago: executing program 3 (id=845): keyctl$instantiate(0xc, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6e65772064656661756c723a73797a20303030303300000000000000000000000000000000dcc6ee229b456df458365a2405090fc31e7b15a66b8fa673c5dc7713b30f7037496aa03a018c1f76b4b231983da0cd7a495bb4e4df65b3066d03260fea37c6"], 0x2a, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001080)) socket(0x1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) syz_clone(0x8000, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x208, 0x202, 0x225, 0x208, 0x278, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [], [], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 14.290865903s ago: executing program 2 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgid(0xee00) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xfffb}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x100010, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000000)='./file1\x00', 0x189042, 0x0) rename(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000040)='./bus\x00') 13.017388105s ago: executing program 0 (id=848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000300850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') open$dir(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0xffffffffffffffff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8b2a92625375bba7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.315273245s ago: executing program 0 (id=863): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xa04a14, &(0x7f0000000080)=ANY=[], 0x1, 0x334, &(0x7f00000019c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000000), &(0x7f0000000340)='%-010d \x00'}, 0x20) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340), 0x1, 0x5f1, &(0x7f0000000600)="$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") socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x7e, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000280)="580000001400add4273200000000b45602117fffffff81000e220e227f000001000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000c335237676a8e5dc968b2bf8ec", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10.284795966s ago: executing program 0 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000000c0)={0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) write(r4, &(0x7f00000003c0), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x0, 0x7, 0x53, 0x40, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0xa, 0x29, 0x0, @empty, @multicast1, {[@cipso={0x86, 0xb, 0x0, [{0x5, 0x5, "ebe544"}]}]}}}}}) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, "fd5a44512b7e1b3c20ec2a3ba53b31dd77000000000400"}}) 10.197557003s ago: executing program 2 (id=857): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080), 0xffffffc3, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r6, 0x1, 0x0, 0x0, {0x1a}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x34}}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) 9.239192467s ago: executing program 0 (id=858): socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e2, &(0x7f00000006c0)="$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") socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x11, 0x693, &(0x7f0000000880)="$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") add_key(0x0, 0x0, &(0x7f0000000580)="fb9c", 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000c00)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80085504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa4fe385000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.087092229s ago: executing program 3 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) setrlimit(0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000a40)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@fat=@errors_continue}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@utf8}, {@uni_xlate}, {@numtail}, {@rodir}, {@fat=@errors_continue}, {@shortname_lower}, {@fat=@showexec}, {@numtail}, {@shortname_lower}]}, 0x6, 0x2ba, &(0x7f0000000640)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2000000400) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x1, 0x2003) socket$packet(0x11, 0x3, 0x300) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000040)=""/104, 0x4d) 6.925608761s ago: executing program 4 (id=861): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a3e67d6eb62a747180000000000000000000000000000009500000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x440, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x168, 0x1b0, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], @ipv6=@ipv4, [], @ipv6=@mcast1, [], @ipv4=@multicast2}}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}, {0x0, 0x80000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) sendmsg$nl_route(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080004000300000024002b8008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b'], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a0000000000200000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r2) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r8 = socket(0x1e, 0x0, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000080)=ANY=[], 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500020000000800124000100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) accept$inet(r8, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/41, 0x29, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 6.784550863s ago: executing program 2 (id=862): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5001, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0)=0x41, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x6e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) link(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./file0\x00') r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x10}], 0x1}}], 0x1, 0x0, 0x0) write$dsp(r0, &(0x7f00000000c0)="59189ffefdfc7fbf56d238d06c3eeeeb05290905e29f9b2db903c98af153c2ec84d2d1782fa85d6f3755e4ab35c1b148873366284b4c08d01ff261af3494d4503d505c99b58f9367243b2e961a0ed971da", 0x51) close_range(r0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0xa40}, {r0, 0x2000}, {r0, 0x1010}], 0x3, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x10000]}, 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) io_uring_setup(0x7dcc, &(0x7f0000000040)={0x0, 0x698b, 0x200, 0x3, 0x1eb, 0x0, r3}) r4 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000ec0)=0xeffd, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) 6.678687782s ago: executing program 1 (id=864): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000300850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') open$dir(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0xffffffffffffffff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8b2a92625375bba7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.569366582s ago: executing program 1 (id=865): ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) creat(0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vfat\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.57088247s ago: executing program 4 (id=866): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xa04a14, &(0x7f0000000080)=ANY=[], 0x1, 0x334, &(0x7f00000019c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000000), &(0x7f0000000340)='%-010d \x00'}, 0x20) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340), 0x1, 0x5f1, &(0x7f0000000600)="$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") socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x7e, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000280)="580000001400add4273200000000b45602117fffffff81000e220e227f000001000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000c335237676a8e5dc968b2bf8ec", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.57028562s ago: executing program 1 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x18) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0xfffffffffffffe43) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002180)={{0x3}}) setresuid(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3}}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000001c0)={[{@fat=@discard}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_mixed}, {@shortname_win95}, {@utf8}]}, 0xfd, 0x299, &(0x7f0000000280)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x0) 5.512188245s ago: executing program 2 (id=868): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) 4.644644441s ago: executing program 4 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000000c0)={0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) write(r4, &(0x7f00000003c0), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x0, 0x7, 0x53, 0x40, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0xa, 0x29, 0x0, @empty, @multicast1, {[@cipso={0x86, 0xb, 0x0, [{0x5, 0x5, "ebe544"}]}]}}}}}) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, "fd5a44512b7e1b3c20ec2a3ba53b31dd77000000000400"}}) 4.253618476s ago: executing program 2 (id=870): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21000f, &(0x7f0000000640)={[{@dax}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2006}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\xachMs\xf1\xe5\x81:Wi\x96\x01e\t\x9d\xcc\xe4\xaa\xf6\x87Y\xcb\x03%\x9f\xc2\x87y8\xf4\nk_\xab\xc0h\xaeb\xf6\x93Y\t~\xf8+T\b3\xdb\n\xc5\x92\x12\xd0\xb2\xff\xad_\xc8\xd4\xb8\xe3\xc0^%\x94\r\n\xfc\xc8Dn\xca+\x06\x8a3\xe2\xb2\"\x92\xda2\xfb\xa8\x8d\x9c\x90\xda>\xf1\xdd\xaf\r\x8d#\xfc\xe8P\xed\x9d\xe6\bz\x9dA\xa3\x8dn\xdfH\xcaz\xff&*Q\x81\xf0\f&\x99?\xcdbL\x06\xce\x95\xabH\xc0|\xafw\xfc\xda\xd9\xbb\xdd0mu\x99\x93unxw\xc2\x19o\xe7\xd7(\'\a\xd0\x93\xf9\xd48\'Vv\xd1\xaeD\xf0\xa4\x7f\xb5T|Y\xe6Y\xf2.Q\x82\xbe\x1a\xed\x04EHv^*\xfazX\xe78\x92\xa1\x9e\xd4\xaf\fg\xf4\xa1\xecy\xb3}'}}]}, 0x1, 0x51c, &(0x7f0000000cc0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x101, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file2\x00', 0x2080c2, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1, 0xa9f, &(0x7f0000002000)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) truncate(&(0x7f0000000600)='./file2\x00', 0x0) 4.251972386s ago: executing program 1 (id=880): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x6c6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='host1x_channel_submit\x00', r2}, 0x10) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000001640)=""/4080, 0xff0}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040), 0x4) dup3(r4, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='batadv_slave_0\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) connect$pppl2tp(r9, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x104, 0x0, 0x4}}, 0x26) r11 = dup2(r9, r8) sendto$inet(r11, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) 3.770691778s ago: executing program 0 (id=871): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() accept(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x840, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 3.716451443s ago: executing program 4 (id=872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000300850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') open$dir(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0xffffffffffffffff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 3.479011104s ago: executing program 1 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private, 0x0, 0x3c}, 0xa, @in=@dev, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.478143844s ago: executing program 4 (id=874): r0 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r0, 0x0, 0x20000014) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fadvise64(r4, 0xfffffffffffffffc, 0xf, 0x4) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x2c040000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r5, 0x1, 0x25, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000000), 0x0) unshare(0xe020600) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f00000014c0)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}}, {{&(0x7f0000000f80)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000700000086080000"], 0x18}}], 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 1.472469731s ago: executing program 0 (id=875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000300850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') open$dir(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0xffffffffffffffff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8b2a92625375bba7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.471986231s ago: executing program 1 (id=876): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.470070001s ago: executing program 4 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x30) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) socket$unix(0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) keyctl$setperm(0x5, r3, 0x21081c22) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r3, 0x0, 0x0) keyctl$read(0xb, r3, &(0x7f0000000300)=""/207, 0xcf) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) removexattr(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 0s ago: executing program 3 (id=878): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x88}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "f3"}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(0x0, 0x7) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) kernel console output (not intermixed with test programs): eating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.028155][ T7128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.042963][ T7326] RDS/IB: syz1: added [ 424.049229][ T7326] smc: adding ib device syz1 with port count 1 [ 424.055607][ T7326] smc: ib device syz1 port 1 has pnetid [ 424.068490][ T7037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.077588][ T7037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.086320][ T7037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.095107][ T7037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.109342][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 424.126346][ T7128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.161053][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.186519][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.255275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.392888][ T4713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.446472][ T4713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.485140][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 424.629853][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.654343][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.663271][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.096590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.442386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.452595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.478207][ T7128] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.517433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.526251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.587359][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.594533][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.641321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.696423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.721982][ T7340] loop2: detected capacity change from 0 to 128 [ 425.748082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.792822][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.800059][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.957978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.966874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.980182][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.776367][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.908843][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.938458][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.957272][ T7350] syz.2.552[7350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.957383][ T7350] syz.2.552[7350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.970523][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.020204][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.039624][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.063285][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 427.068609][ T7350] Invalid ELF header magic: != ELF [ 427.079485][ T7128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.114330][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.138883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.186425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.341275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.397856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.493131][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.716319][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 428.736285][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 428.753592][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 429.374150][ T7366] infiniband syz2: set active [ 429.379110][ T7366] infiniband syz2: added ip6gretap0 [ 429.428852][ T7366] rdma_rxe: unable to create cq [ 429.433791][ T7366] infiniband syz2: Couldn't create ib_mad CQ [ 429.440431][ T7366] infiniband syz2: Couldn't open port 1 [ 429.442855][ T3714] ip6gretap0 speed is unknown, defaulting to 1000 [ 429.468996][ T7366] RDS/IB: syz2: added [ 429.473081][ T7366] smc: adding ib device syz2 with port count 1 [ 429.479474][ T7366] smc: ib device syz2 port 1 has pnetid [ 429.542608][ T22] ip6gretap0 speed is unknown, defaulting to 1000 [ 429.565102][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 429.662859][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 429.858571][ T3795] device hsr_slave_0 left promiscuous mode [ 429.891317][ T3795] device hsr_slave_1 left promiscuous mode [ 429.906608][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.046539][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.065833][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.888237][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.919502][ T3795] device bridge_slave_1 left promiscuous mode [ 430.925789][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.951602][ T3795] device bridge_slave_0 left promiscuous mode [ 430.958659][ T3652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.971228][ T3652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.980110][ T3652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.989492][ T3652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.998716][ T3652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 431.006012][ T3652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 431.014556][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.086590][ T3795] device veth1_macvtap left promiscuous mode [ 431.093914][ T3795] device veth0_macvtap left promiscuous mode [ 431.109870][ T3795] device veth1_vlan left promiscuous mode [ 431.115742][ T3795] device veth0_vlan left promiscuous mode [ 432.191438][ T7386] overlayfs: missing 'lowerdir' [ 433.098718][ T3648] Bluetooth: hci6: command tx timeout [ 433.168074][ T26] audit: type=1326 audit(1860437677.705:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.204368][ T26] audit: type=1326 audit(1860437677.705:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.234339][ T26] audit: type=1326 audit(1860437677.705:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.259380][ T26] audit: type=1326 audit(1860437677.705:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.282173][ T26] audit: type=1326 audit(1860437677.705:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.304831][ T26] audit: type=1326 audit(1860437677.705:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.327410][ T26] audit: type=1326 audit(1860437677.705:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.350668][ T26] audit: type=1326 audit(1860437677.705:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.374035][ T26] audit: type=1326 audit(1860437677.705:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.396270][ T26] audit: type=1326 audit(1860437677.705:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc239d7def9 code=0x7ffc0000 [ 433.725015][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 433.776796][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 433.826945][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.876560][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.434456][ T3795] bond0 (unregistering): Released all slaves [ 434.533553][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 434.611787][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 434.665814][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 434.719216][ T7366] ip6gretap0 speed is unknown, defaulting to 1000 [ 435.177282][ T3648] Bluetooth: hci6: command tx timeout [ 435.318006][ T7395] loop3: detected capacity change from 0 to 512 [ 435.458707][ T7395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 435.467865][ T7395] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 435.770986][ T7399] Process accounting resumed [ 435.811645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.371966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.509122][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.558323][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.589812][ T7128] device veth0_vlan entered promiscuous mode [ 436.640339][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.709179][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.828700][ T7378] ip6gretap0 speed is unknown, defaulting to 1000 [ 436.848427][ T7128] device veth1_vlan entered promiscuous mode [ 437.007039][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.045758][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.489943][ T3648] Bluetooth: hci6: command tx timeout [ 439.501425][ T7128] device veth0_macvtap entered promiscuous mode [ 439.522065][ T7408] EXT4-fs (loop3): unmounting filesystem. [ 439.527783][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.790190][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 439.790206][ T26] audit: type=1326 audit(1860437684.065:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 439.871090][ T26] audit: type=1326 audit(1860437684.065:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 439.927143][ T7128] device veth1_macvtap entered promiscuous mode [ 439.957287][ T26] audit: type=1326 audit(1860437684.065:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 439.989022][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.995400][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.099714][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.103110][ T26] audit: type=1326 audit(1860437684.065:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 440.135618][ T7425] configfs: Unknown parameter 'fd' [ 440.145392][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.164278][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.175215][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.185478][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.197064][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.207801][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.217391][ T26] audit: type=1326 audit(1860437684.065:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 440.241693][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.251953][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.264397][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.291529][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.302425][ T26] audit: type=1326 audit(1860437684.065:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 440.341861][ T26] audit: type=1326 audit(1860437684.325:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 440.364878][ T26] audit: type=1326 audit(1860437684.325:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 440.506859][ T3795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.537484][ T3648] Bluetooth: hci6: command tx timeout [ 440.551665][ T26] audit: type=1326 audit(1860437685.085:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7427 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 440.597163][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.607045][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.626068][ T26] audit: type=1326 audit(1860437685.105:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7427 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37837def9 code=0x7ffc0000 [ 440.670207][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.703221][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.742600][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.764300][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.778026][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.794346][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.806807][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.825450][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.835826][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.854551][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.906955][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.970062][ T3795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.994487][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 441.015652][ T3652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 441.024529][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 441.034752][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.046681][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 441.054752][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 441.062455][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.068998][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.172615][ T7128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.201145][ T7128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.263149][ T7128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.272159][ T7128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.312235][ T3795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.597977][ T3795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.701320][ T7450] loop2: detected capacity change from 0 to 512 [ 441.732706][ T7450] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 441.750537][ T7450] UDF-fs: Scanning with blocksize 512 failed [ 441.794859][ T7450] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 441.839165][ T7450] UDF-fs: Scanning with blocksize 1024 failed [ 441.944363][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.960277][ T7450] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 441.997335][ T7450] UDF-fs: Scanning with blocksize 2048 failed [ 442.028200][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.047026][ T5288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.058399][ T7450] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 442.078591][ T5288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.156122][ T7450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.213141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.238129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 442.328338][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 442.346724][ T7378] chnl_net:caif_netlink_parms(): no params data found [ 442.399964][ T7436] ip6gretap0 speed is unknown, defaulting to 1000 [ 443.109422][ T3648] Bluetooth: hci4: command tx timeout [ 443.541167][ T7494] loop2: detected capacity change from 0 to 128 [ 443.816774][ T7494] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 445.247886][ T3648] Bluetooth: hci4: command tx timeout [ 445.481318][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 446.333013][ T7530] loop2: detected capacity change from 0 to 128 [ 446.349586][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 446.349601][ T26] audit: type=1326 audit(1860437690.885:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d7def9 code=0x0 [ 446.382588][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.394653][ T7530] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 446.408563][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.432605][ T7378] device bridge_slave_0 entered promiscuous mode [ 446.749995][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.762073][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.780876][ T7378] device bridge_slave_1 entered promiscuous mode [ 446.932836][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.963460][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.977247][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 447.126486][ T7378] team0: Port device team_slave_0 added [ 447.167959][ T7378] team0: Port device team_slave_1 added [ 447.235677][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.242081][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 447.246691][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.277711][ T3648] Bluetooth: hci4: command tx timeout [ 447.325476][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.378068][ T7] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 447.422269][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.493627][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.522296][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 447.540729][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.601913][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.699062][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.738569][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 447.760829][ T7] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 447.811175][ T7] usb 3-1: Manufacturer: syz [ 447.856149][ T7] usb 3-1: config 0 descriptor?? [ 447.913470][ T7436] chnl_net:caif_netlink_parms(): no params data found [ 447.998426][ T7378] device hsr_slave_0 entered promiscuous mode [ 448.017535][ T7378] device hsr_slave_1 entered promiscuous mode [ 448.024383][ T7378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.049163][ T7378] Cannot create hsr debugfs directory [ 449.175732][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.184861][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.201252][ T7436] device bridge_slave_0 entered promiscuous mode [ 449.271743][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.319745][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.336517][ T7] rc_core: IR keymap rc-hauppauge not found [ 449.342620][ T3652] Bluetooth: hci4: command tx timeout [ 449.355194][ T7] Registered IR keymap rc-empty [ 449.362779][ T7436] device bridge_slave_1 entered promiscuous mode [ 449.379282][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.431579][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.488438][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 449.503314][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 449.594390][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.647568][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.698702][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.707959][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.747386][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.772343][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.788535][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.833361][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.887590][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.894152][ T7588] overlayfs: missing 'lowerdir' [ 449.927342][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 449.952343][ T7378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.967284][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 450.007815][ T7] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 450.039928][ T7] mceusb 3-1:0.0: Registered Ø‹ with mce emulator interface version 1 [ 450.055703][ T7] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 450.087617][ T7588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.095343][ T7588] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 450.123264][ T7588] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 450.151143][ T7588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.152686][ T7436] team0: Port device team_slave_0 added [ 450.176978][ T7588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 450.212338][ T7588] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 450.234280][ T7588] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.241821][ T7588] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 450.246052][ T7378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.263975][ T7588] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 450.278250][ T7588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.284276][ T7588] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 450.291126][ T7588] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 450.313134][ T7588] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 450.359878][ T7436] team0: Port device team_slave_1 added [ 450.379290][ T7588] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 450.385269][ T7588] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 450.415024][ T7588] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.432123][ T7588] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 450.454929][ T7588] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 450.467608][ T7] usb 3-1: USB disconnect, device number 4 [ 450.476886][ T7378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.539669][ T7599] loop2: detected capacity change from 0 to 128 [ 450.567018][ T3795] device hsr_slave_0 left promiscuous mode [ 450.586217][ T3795] device hsr_slave_1 left promiscuous mode [ 450.604878][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.638699][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.665964][ T7601] Invalid ELF header magic: != ELF [ 450.672354][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.706269][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.719326][ T3795] device bridge_slave_1 left promiscuous mode [ 450.739395][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.754094][ T3795] device bridge_slave_0 left promiscuous mode [ 450.782910][ T7605] raw_sendmsg: syz.1.591 forgot to set AF_INET. Fix it! [ 450.787385][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.834330][ T3795] device veth1_macvtap left promiscuous mode [ 450.859402][ T3795] device veth0_macvtap left promiscuous mode [ 450.871917][ T3795] device veth1_vlan left promiscuous mode [ 450.879181][ T3795] device veth0_vlan left promiscuous mode [ 451.932405][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 452.020365][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 452.095236][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.138811][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 452.166585][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.217435][ T3648] Bluetooth: hci1: command 0x0406 tx timeout [ 452.297425][ T3648] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.303490][ T3648] Bluetooth: hci5: command 0x0c1a tx timeout [ 452.377255][ T3652] Bluetooth: hci6: command 0x0c1a tx timeout [ 452.467212][ T3648] Bluetooth: hci4: command 0x0c1a tx timeout [ 452.767461][ T3714] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 452.890850][ T3795] bond0 (unregistering): Released all slaves [ 452.986255][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.994864][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.022565][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.070682][ T7378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.095002][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.102382][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.132437][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.249431][ T7436] device hsr_slave_0 entered promiscuous mode [ 453.258107][ T7436] device hsr_slave_1 entered promiscuous mode [ 453.275452][ T7436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.283232][ T7436] Cannot create hsr debugfs directory [ 453.516354][ T3714] usb 3-1: config 223 has an invalid interface number: 40 but max is 1 [ 453.708356][ T3714] usb 3-1: config 223 has an invalid interface number: 89 but max is 1 [ 453.721570][ T3714] usb 3-1: config 223 has an invalid descriptor of length 0, skipping remainder of the config [ 454.515467][ T7378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.527593][ T3648] Bluetooth: hci6: command 0x0c1a tx timeout [ 454.604888][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 454.607338][ T3714] usb 3-1: config 223 has no interface number 0 [ 454.611093][ T3648] Bluetooth: hci1: command 0x0406 tx timeout [ 454.611130][ T3648] Bluetooth: hci5: command 0x0c1a tx timeout [ 454.611189][ T3648] Bluetooth: hci0: command 0x0c1a tx timeout [ 454.611216][ T3648] Bluetooth: hci4: command 0x0c1a tx timeout [ 454.617493][ T3714] usb 3-1: config 223 has no interface number 1 [ 454.617535][ T3714] usb 3-1: config 223 interface 40 altsetting 71 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 454.652067][ T7378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.691453][ T7378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.806859][ T7625] 9pnet_fd: Insufficient options for proto=fd [ 454.854831][ T3714] usb 3-1: config 223 interface 40 altsetting 71 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 454.866726][ T3714] usb 3-1: config 223 interface 40 altsetting 71 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 454.878087][ T3714] usb 3-1: config 223 interface 40 altsetting 71 has an invalid endpoint with address 0x0, skipping [ 454.889529][ T3714] usb 3-1: config 223 interface 40 altsetting 71 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 454.900902][ T3714] usb 3-1: config 223 interface 89 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 454.915968][ T3714] usb 3-1: config 223 interface 89 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 454.937382][ T3714] usb 3-1: config 223 interface 89 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 455.302010][ T3714] usb 3-1: config 223 interface 40 has no altsetting 0 [ 455.312026][ T3714] usb 3-1: config 223 interface 89 has no altsetting 0 [ 455.405992][ T7378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.617403][ T3714] usb 3-1: string descriptor 0 read error: -71 [ 455.623707][ T3714] usb 3-1: New USB device found, idVendor=2040, idProduct=c200, bcdDevice= d.53 [ 455.652098][ T3714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.819217][ T7642] loop2: detected capacity change from 0 to 512 [ 455.851205][ T3714] usb 3-1: can't set config #223, error -71 [ 455.861753][ T3714] usb 3-1: USB disconnect, device number 5 [ 455.889160][ T7642] EXT4-fs: Ignoring removed mblk_io_submit option [ 455.914730][ T7642] EXT4-fs: Ignoring removed i_version option [ 455.955126][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.996238][ T7642] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.599: invalid block [ 456.069821][ T7642] EXT4-fs (loop2): Remounting filesystem read-only [ 456.084195][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.097295][ T7642] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.599: couldn't read orphan inode 11 (err -117) [ 456.109757][ T7642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 456.127569][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.135277][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.277631][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.286504][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.334031][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.338771][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.341250][ T5288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.378148][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.396783][ T7652] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.599: Directory hole found for htree leaf block 0 [ 456.412034][ T7652] EXT4-fs (loop2): Remounting filesystem read-only [ 456.441244][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.461548][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.479735][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.488394][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.508815][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.509621][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.533332][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.544569][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.563113][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.570351][ T5288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.571028][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.603659][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.606200][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.626422][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.637246][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.646611][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.672714][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.689685][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 456.707411][ T3648] Bluetooth: hci0: command 0x0c1a tx timeout [ 456.719395][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.721619][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.726819][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.783272][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.787980][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.798846][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.816958][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.834716][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.847508][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.847950][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.863371][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.877264][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.907431][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 456.939792][ T7378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.962450][ T7378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.002203][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.014389][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.045314][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.064155][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 457.072186][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 457.079703][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 457.087775][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 457.095312][ T3684] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 457.097862][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.131780][ T3684] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 457.248873][ T7661] loop4: detected capacity change from 0 to 8 [ 457.269519][ T7661] SQUASHFS error: zlib decompression failed, data probably corrupt [ 457.277776][ T7661] SQUASHFS error: Failed to read block 0x9b: -5 [ 457.284080][ T7661] SQUASHFS error: Unable to read metadata cache entry [99] [ 457.291449][ T7661] SQUASHFS error: Unable to read inode 0x127 [ 457.356459][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.620483][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.870783][ T6962] EXT4-fs (loop2): unmounting filesystem. [ 457.905853][ T7436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.942132][ T7436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.009362][ T7436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.017973][ T7666] loop4: detected capacity change from 0 to 128 [ 458.036336][ T7666] FAT-fs (loop4): Directory bread(block 160) failed [ 458.059283][ T7666] FAT-fs (loop4): Directory bread(block 161) failed [ 458.059739][ T7436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.065922][ T7666] FAT-fs (loop4): Directory bread(block 162) failed [ 458.065950][ T7666] FAT-fs (loop4): Directory bread(block 163) failed [ 458.065974][ T7666] FAT-fs (loop4): Directory bread(block 164) failed [ 458.151744][ T7669] loop2: detected capacity change from 0 to 256 [ 458.177567][ T7666] FAT-fs (loop4): Directory bread(block 165) failed [ 458.187885][ T7669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 458.207638][ T7666] FAT-fs (loop4): Directory bread(block 166) failed [ 458.214488][ T7666] FAT-fs (loop4): Directory bread(block 167) failed [ 458.363949][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.371859][ T7666] FAT-fs (loop4): Directory bread(block 160) failed [ 458.374789][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.407366][ T7666] FAT-fs (loop4): Directory bread(block 161) failed [ 458.457912][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.494140][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.553543][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 458.564159][ T7677] loop2: detected capacity change from 0 to 2048 [ 458.587833][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 458.614465][ T7677] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 458.628774][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.640138][ T7677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.646873][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.686310][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.748963][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.766704][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.777651][ T3648] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.932477][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.939741][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.274408][ T7687] Device name cannot be null; rc = [-22] [ 460.625610][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.824617][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.887360][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.958429][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.965568][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.154977][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.164627][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.675515][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.692236][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.739868][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.785877][ T7378] device veth0_vlan entered promiscuous mode [ 462.237673][ T48] Bluetooth: hci2: unexpected event 0x07 length: 4 < 255 [ 462.663518][ T7436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.718407][ T7709] loop2: detected capacity change from 0 to 1024 [ 462.758548][ T7436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.790273][ T7709] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 462.817325][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 462.840740][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 462.858245][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.870347][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 462.890380][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 462.936001][ T7709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 462.946042][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.374824][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.681158][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.690710][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.711199][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 463.770463][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.837016][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.853496][ T7378] device veth1_vlan entered promiscuous mode [ 463.894319][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 463.905757][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.929818][ T7378] device veth0_macvtap entered promiscuous mode [ 463.938719][ T7727] No such timeout policy "syz0" [ 463.943786][ T7728] loop4: detected capacity change from 0 to 256 [ 464.151611][ T7378] device veth1_macvtap entered promiscuous mode [ 464.307560][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 464.885926][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.902244][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.913300][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.924255][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.934440][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.946560][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.956792][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.979122][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.993576][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.017472][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.029425][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.191056][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.207737][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.216523][ T6962] EXT4-fs (loop2): unmounting filesystem. [ 465.234565][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.264975][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.344588][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.365182][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.747451][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.052223][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.081456][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.108996][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.155629][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.168515][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.183750][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.257209][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.321707][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.349208][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.377831][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.400117][ T7378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.411961][ T7378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.444690][ T7378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.473978][ T7378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.584262][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.592875][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.775777][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.405498][ T7436] device veth0_vlan entered promiscuous mode [ 467.448603][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 467.498577][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 467.508063][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.516659][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.541081][ T7767] loop4: detected capacity change from 0 to 512 [ 467.558183][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.566421][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.589276][ T7436] device veth1_vlan entered promiscuous mode [ 467.608511][ T7767] EXT4-fs: Ignoring removed nobh option [ 467.706357][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 467.768273][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 467.784731][ T7767] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 467.823460][ T7436] device veth0_macvtap entered promiscuous mode [ 467.893129][ T7767] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.617: attempt to clear invalid blocks 2 len 1 [ 467.922399][ T7767] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 467.960648][ T7436] device veth1_macvtap entered promiscuous mode [ 467.988021][ T3717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.004680][ T3717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.062072][ T7767] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.617: invalid indirect mapped block 1819239214 (level 0) [ 468.106747][ T7767] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.617: invalid indirect mapped block 1819239214 (level 1) [ 468.156691][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 468.175155][ T7767] EXT4-fs (loop4): 1 truncate cleaned up [ 468.192027][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 468.205986][ T7767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 468.218933][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 468.603106][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.859380][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.741411][ T7791] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.617: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 470.222589][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.314847][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.349906][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.367199][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.902726][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.110678][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.121995][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.147192][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.170414][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.189505][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.204235][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.205008][ T7128] EXT4-fs (loop4): unmounting filesystem. [ 471.222119][ T7506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.250278][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.259494][ T7506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.283630][ T7799] No such timeout policy "syz0" [ 471.283793][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.329110][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 471.364889][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.376135][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.391556][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.402710][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.419693][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.435745][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.462945][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.487404][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.525111][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.556485][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.665404][ T7436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.809970][ T7436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.063255][ T4591] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 472.089447][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.122644][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.132179][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.247223][ T7809] loop4: detected capacity change from 0 to 8 [ 472.281019][ T7809] SQUASHFS error: lzo decompression failed, data probably corrupt [ 472.289169][ T7809] SQUASHFS error: Failed to read block 0x91: -5 [ 472.295475][ T7809] SQUASHFS error: Unable to read metadata cache entry [8f] [ 472.302830][ T7809] SQUASHFS error: Unable to read inode 0x11f [ 472.397822][ T7436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.808011][ T7436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.816751][ T7436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.885109][ T7436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.194684][ T7819] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 473.202630][ T7819] netlink: 'syz.0.556': attribute type 2 has an invalid length. [ 473.212573][ T3648] Bluetooth: Wrong link type (-71) [ 473.246458][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.247391][ T5288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.264600][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.279590][ T4591] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 473.705799][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 474.071718][ T4591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.086367][ T5288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.104056][ T4591] usb 2-1: config 0 descriptor?? [ 474.333547][ T4591] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 474.490017][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 475.022324][ T7833] loop2: detected capacity change from 0 to 512 [ 475.481655][ T7833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 475.491542][ T7833] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 475.548465][ T7827] nbd4: detected capacity change from 0 to 6 [ 475.557012][ T4591] gspca_sunplus: reg_w_riv err -110 [ 475.563009][ T4591] sunplus: probe of 2-1:0.0 failed with error -110 [ 475.579431][ T946] usb 2-1: USB disconnect, device number 10 [ 475.781598][ T7821] block nbd4: shutting down sockets [ 475.792314][ T7837] loop4: detected capacity change from 0 to 2048 [ 475.800604][ T6962] EXT4-fs (loop2): unmounting filesystem. [ 475.839806][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.849063][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 475.861994][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.874117][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 475.951014][ T7848] input: syz1 as /devices/virtual/input/input11 [ 475.995915][ T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.077413][ T120] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.461847][ T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.471070][ T120] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.484095][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.494115][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.502129][ T7424] ldm_validate_partition_table(): Disk read failed. [ 476.516089][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.525458][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.541781][ T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.560392][ T120] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.569116][ T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.578329][ T120] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.586652][ T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.595960][ T120] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.604173][ T7424] Dev nbd4: unable to read RDB block 0 [ 476.614455][ T7837] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 476.728824][ T7837] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 476.747312][ T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.757595][ T120] Buffer I/O error on dev nbd4, logical block 0, async page read [ 476.776076][ T7424] nbd4: unable to read partition table [ 476.798480][ T7837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.808007][ T7424] nbd4: partition table beyond EOD, truncated [ 476.838131][ T7424] ldm_validate_partition_table(): Disk read failed. [ 476.865687][ T7424] Dev nbd4: unable to read RDB block 0 [ 476.871443][ T26] audit: type=1326 audit(1860437721.405:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 476.908115][ T7424] nbd4: unable to read partition table [ 476.913852][ T7424] nbd4: partition table beyond EOD, truncated [ 477.003488][ T26] audit: type=1326 audit(1860437721.405:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 477.186197][ T26] audit: type=1326 audit(1860437721.425:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 477.273543][ T7872] loop4: detected capacity change from 0 to 164 [ 477.447463][ T26] audit: type=1326 audit(1860437721.425:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 478.261592][ T7882] loop3: detected capacity change from 0 to 128 [ 478.269680][ T7882] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 478.528538][ T7884] "syz.4.632" (7884) uses obsolete ecb(arc4) skcipher [ 478.884381][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 478.908557][ T26] audit: type=1326 audit(1860437721.425:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 479.057454][ T26] audit: type=1326 audit(1860437721.425:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 479.131906][ T26] audit: type=1326 audit(1860437721.425:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 479.173155][ T26] audit: type=1326 audit(1860437721.425:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bf7def9 code=0x7ffc0000 [ 482.546239][ T7932] loop3: detected capacity change from 0 to 512 [ 483.663064][ T7932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 483.672198][ T7932] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 483.879098][ T7436] EXT4-fs (loop3): unmounting filesystem. [ 484.067640][ T3684] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 484.199317][ T3648] Bluetooth: hci0: Opcode 0x206c failed: -22 [ 484.205843][ T3648] Bluetooth: hci0: Opcode 0x2046 failed: -22 [ 484.214562][ T3648] Bluetooth: hci0: Opcode 0x206c failed: -22 [ 484.221156][ T3648] Bluetooth: hci0: Opcode 0x2046 failed: -22 [ 484.633143][ T3648] Bluetooth: hci6: unexpected event for opcode 0x041b [ 484.856067][ T7952] loop3: detected capacity change from 0 to 1024 [ 484.874454][ T7952] hfsplus: umask requires a value [ 484.880098][ T7952] hfsplus: unable to parse mount options [ 485.197204][ T6695] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 485.262240][ T7424] blk_print_req_error: 19 callbacks suppressed [ 485.262258][ T7424] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.287302][ T3684] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 485.298294][ T3684] usb 3-1: can't read configurations, error -71 [ 485.477667][ T6695] usb 5-1: Using ep0 maxpacket: 16 [ 485.727493][ T3684] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 485.857445][ T6695] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 485.937245][ T6695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.955688][ T6695] usb 5-1: Product: syz [ 485.960348][ T6695] usb 5-1: Manufacturer: syz [ 485.965565][ T6695] usb 5-1: SerialNumber: syz [ 485.977500][ T3684] usb 3-1: Using ep0 maxpacket: 32 [ 485.988309][ T6695] usb 5-1: config 0 descriptor?? [ 486.109315][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.124290][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.137709][ T3684] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 486.146964][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.166133][ T3684] usb 3-1: config 0 descriptor?? [ 486.863407][ T3684] glorious 0003:258A:0033.000F: item fetching failed at offset 0/3 [ 486.937984][ T3684] glorious: probe of 0003:258A:0033.000F failed with error -22 [ 487.132179][ T3714] usb 3-1: USB disconnect, device number 7 [ 487.257744][ T6695] usb 5-1: MIDIStreaming interface descriptor not found [ 487.297811][ T7974] IPv6: sit1: Disabled Multicast RS [ 487.385904][ T7976] loop3: detected capacity change from 0 to 256 [ 487.434059][ T6695] usb 5-1: USB disconnect, device number 5 [ 487.478193][ T7976] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 487.514052][ T7422] udevd[7422]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.585930][ T7982] loop2: detected capacity change from 0 to 256 [ 488.598123][ T7982] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 488.787168][ T3714] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 489.617197][ T3714] usb 4-1: Using ep0 maxpacket: 8 [ 490.065264][ T3714] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 490.130250][ T3714] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.144611][ T3714] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.349077][ T3714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.457938][ T3714] usbtmc 4-1:16.0: bulk endpoints not found [ 490.869753][ T8017] loop2: detected capacity change from 0 to 8192 [ 491.633785][ T3682] usb 4-1: USB disconnect, device number 7 [ 493.997313][ T8035] loop2: detected capacity change from 0 to 1764 [ 494.756085][ T7856] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.792286][ T8033] loop3: detected capacity change from 0 to 8192 [ 494.818124][ T8033] FAT-fs (loop3): Unrecognized mount option "GPL" or missing value [ 494.873369][ T7856] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.246741][ T8066] loop2: detected capacity change from 0 to 1024 [ 496.319504][ T7424] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 497.255842][ T8076] device pim6reg1 entered promiscuous mode [ 499.118051][ T8089] loop2: detected capacity change from 0 to 256 [ 499.153206][ T8091] loop3: detected capacity change from 0 to 164 [ 499.175160][ T8091] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 500.141412][ T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 500.154660][ T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 500.164515][ T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 500.173858][ T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 500.182549][ T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 500.189787][ T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 501.151568][ T8099] ip6gretap0 speed is unknown, defaulting to 1000 [ 501.457386][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.463729][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.488531][ T8111] loop3: detected capacity change from 0 to 512 [ 501.725465][ T8111] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.690: corrupted inode contents [ 501.986659][ T8111] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #3: comm syz.3.690: mark_inode_dirty error [ 502.006856][ T8111] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.690: corrupted inode contents [ 502.022655][ T8111] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.690: mark_inode_dirty error [ 502.055552][ T8111] Quota error (device loop3): write_blk: dquota write failed [ 502.066161][ T8111] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 502.079074][ T8111] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.690: Failed to acquire dquot type 0 [ 502.107950][ T8111] EXT4-fs (loop3): 1 orphan inode deleted [ 502.113898][ T8111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 502.124723][ T8111] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 502.135146][ T3752] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 502.191607][ T3752] EXT4-fs error (device loop3): ext4_release_dquot:6823: comm kworker/u4:9: Failed to release dquot type 1 [ 502.217304][ T48] Bluetooth: hci7: command tx timeout [ 502.995743][ T7436] EXT4-fs (loop3): unmounting filesystem. [ 504.674109][ T48] Bluetooth: hci7: command tx timeout [ 504.800402][ T8099] chnl_net:caif_netlink_parms(): no params data found [ 505.401641][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.490922][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.653371][ T8099] device bridge_slave_0 entered promiscuous mode [ 505.790741][ T3648] Bluetooth: hci6: command 0x0c1a tx timeout [ 506.047899][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.064683][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.078471][ T8099] device bridge_slave_1 entered promiscuous mode [ 506.714717][ T3648] Bluetooth: hci7: command tx timeout [ 506.816006][ T3652] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 506.826716][ T3652] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 506.844881][ T3652] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 506.852906][ T3652] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 506.863252][ T3652] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 506.876052][ T3652] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 506.912238][ T8163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.968661][ T8099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.988692][ T8165] nbd3: detected capacity change from 0 to 6 [ 507.018865][ T8099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.040323][ T8164] block nbd3: shutting down sockets [ 507.070110][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.079274][ C0] buffer_io_error: 19 callbacks suppressed [ 507.079282][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.093674][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.103007][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.111258][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.120411][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.121270][ T8164] loop3: detected capacity change from 0 to 2048 [ 507.128452][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.143699][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.151622][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.161101][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.169124][ T7424] ldm_validate_partition_table(): Disk read failed. [ 507.178096][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.187237][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.195200][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.204285][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.214607][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.225480][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.235185][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.244508][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.253370][ T7424] Dev nbd3: unable to read RDB block 0 [ 507.328090][ T8164] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 507.339233][ T120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.348400][ T120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 507.356830][ T7424] nbd3: unable to read partition table [ 507.363857][ T7424] nbd3: partition table beyond EOD, truncated [ 507.438882][ T8099] team0: Port device team_slave_0 added [ 507.448486][ T7424] ldm_validate_partition_table(): Disk read failed. [ 507.509426][ T8164] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 507.540578][ T7424] Dev nbd3: unable to read RDB block 0 [ 507.549577][ T8099] team0: Port device team_slave_1 added [ 507.566695][ T7424] nbd3: unable to read partition table [ 507.588665][ T8164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.599228][ T7424] nbd3: partition table beyond EOD, truncated [ 507.748626][ T8157] ip6gretap0 speed is unknown, defaulting to 1000 [ 507.817397][ T3652] Bluetooth: hci6: command 0x0c1a tx timeout [ 507.880277][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.897369][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.954498][ T8099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.969490][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.991666][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.035142][ T8099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.172500][ T8099] device hsr_slave_0 entered promiscuous mode [ 508.232640][ T8099] device hsr_slave_1 entered promiscuous mode [ 508.257332][ T8099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.264915][ T8099] Cannot create hsr debugfs directory [ 508.446429][ T8169] loop3: detected capacity change from 0 to 1024 [ 508.628949][ T8169] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 508.714902][ T8169] EXT4-fs (loop3): group descriptors corrupted! [ 508.769746][ T8175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.787588][ T3652] Bluetooth: hci7: command tx timeout [ 508.787859][ T8174] loop2: detected capacity change from 0 to 64 [ 508.938247][ T3652] Bluetooth: hci8: command tx timeout [ 509.877109][ T3682] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 509.907220][ T3652] Bluetooth: hci6: command 0x0c1a tx timeout [ 509.950734][ T8099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.995230][ T8157] chnl_net:caif_netlink_parms(): no params data found [ 510.130820][ T3682] usb 1-1: Using ep0 maxpacket: 32 [ 511.326799][ T48] Bluetooth: hci8: command tx timeout [ 511.338980][ T8099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.397881][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.406190][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.415072][ T8157] device bridge_slave_0 entered promiscuous mode [ 511.486873][ T8099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.492850][ T3682] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 511.505856][ T3682] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 511.518277][ T3682] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 511.530368][ T3682] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 511.545042][ T3682] usb 1-1: config 0 interface 0 has no altsetting 0 [ 511.562695][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.572269][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.581632][ T8194] loop2: detected capacity change from 0 to 16 [ 511.591570][ T8157] device bridge_slave_1 entered promiscuous mode [ 511.641048][ T8194] erofs: (device loop2): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 511.656737][ T8099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.695427][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.712111][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.727532][ T3682] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 511.750733][ T3682] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 511.792989][ T3682] usb 1-1: Product: syz [ 511.805844][ T3682] usb 1-1: Manufacturer: syz [ 511.810922][ T3682] usb 1-1: SerialNumber: syz [ 511.822026][ T8175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.822607][ T3682] usb 1-1: config 0 descriptor?? [ 511.850640][ T8157] team0: Port device team_slave_0 added [ 511.868569][ T8157] team0: Port device team_slave_1 added [ 511.877171][ T3682] usb 1-1: can't set config #0, error -71 [ 511.888154][ T8199] loop3: detected capacity change from 0 to 2048 [ 511.895566][ T8199] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 511.911389][ T3682] usb 1-1: USB disconnect, device number 9 [ 511.973140][ T8199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.982654][ T8001] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 512.012826][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.028777][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.086429][ T8157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.188740][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.195900][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.585003][ T3652] Bluetooth: hci8: command tx timeout [ 513.637599][ T8001] usb 3-1: Using ep0 maxpacket: 32 [ 513.737430][ T3652] Bluetooth: hci5: command 0x0c1a tx timeout [ 513.757565][ T8001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 513.810392][ T8157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.826150][ T8001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 513.873037][ T8001] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 513.882762][ T8001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.893163][ T8001] usb 3-1: config 0 descriptor?? [ 513.918369][ T8194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 513.945625][ T8157] device hsr_slave_0 entered promiscuous mode [ 513.958389][ T8001] hub 3-1:0.0: USB hub found [ 513.969444][ T8157] device hsr_slave_1 entered promiscuous mode [ 513.976795][ T8157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.996518][ T8157] Cannot create hsr debugfs directory [ 514.087231][ T946] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 514.114701][ T8099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.154035][ T8099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.193441][ T8099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.225929][ T8099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 514.257369][ T8001] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 514.337428][ T946] usb 4-1: Using ep0 maxpacket: 8 [ 514.379336][ T8157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.442718][ T8099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.484134][ T8157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.515215][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.523825][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.536352][ T8099] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.556517][ T8001] hid-generic 0003:046D:C314.0010: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 514.603070][ T8157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.628366][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.643199][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.651693][ T946] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 514.661034][ T946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.672171][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.679326][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.688742][ T946] usb 4-1: Product: syz [ 514.693173][ T946] usb 4-1: Manufacturer: syz [ 514.698839][ T946] usb 4-1: SerialNumber: syz [ 514.709709][ T946] usb 4-1: config 0 descriptor?? [ 514.719060][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.758702][ T946] cytherm 4-1:0.0: Cypress thermometer device now attached [ 514.766525][ T8194] loop2: detected capacity change from 0 to 1024 [ 514.790495][ T8157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.868683][ T41] usb 4-1: USB disconnect, device number 8 [ 514.874786][ T41] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 514.963655][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.993115][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.027621][ T3679] usb 3-1: USB disconnect, device number 8 [ 515.053533][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.060788][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.122091][ T8215] tipc: Started in network mode [ 515.135681][ T8215] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 515.156257][ T8215] tipc: Enabling of bearer rejected, failed to enable media [ 515.165526][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.174990][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 515.184406][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 515.195738][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.204437][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.266141][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.305652][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.330113][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.339105][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.349057][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.359306][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.481306][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.687994][ T3652] Bluetooth: hci8: command tx timeout [ 516.096269][ T8229] loop2: detected capacity change from 0 to 128 [ 516.104806][ T8157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 516.119457][ T8157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 516.122972][ T8229] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 516.157249][ T8001] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 516.181705][ T8157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 516.227612][ T8157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 516.397247][ T8001] usb 4-1: Using ep0 maxpacket: 16 [ 516.445931][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.457597][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.524770][ T8001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 516.548940][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.559525][ T8001] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 516.561007][ T8099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.574622][ T8001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 517.358691][ T8242] blktrace: Concurrent blktraces are not allowed on loop0 [ 518.658732][ T8001] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 518.695354][ T8157] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.714087][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.714379][ T8247] ipt_REJECT: ECHOREPLY no longer supported. [ 518.727519][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.727964][ T8248] loop2: detected capacity change from 0 to 512 [ 518.770114][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.778770][ T8001] usb 4-1: string descriptor 0 read error: -71 [ 518.784967][ T8001] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 518.810088][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.824379][ T8001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 518.837725][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.844909][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.859346][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 518.876447][ T8247] netlink: 'syz.0.720': attribute type 8 has an invalid length. [ 518.888073][ T8001] usb 4-1: can't set config #1, error -71 [ 518.896098][ T8248] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 518.906993][ T8001] usb 4-1: USB disconnect, device number 9 [ 518.918030][ T8248] System zones: 0-2, 18-18, 34-35 [ 518.925616][ T8247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.944363][ T8248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 518.953739][ T8248] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 518.987368][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.996223][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.006373][ T8254] No such timeout policy "syz0" [ 519.024083][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.031281][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.208114][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.227870][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.264009][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.366032][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.909767][ T8099] device veth0_vlan entered promiscuous mode [ 519.940567][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.007920][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.042982][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.043083][ T8259] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.721: Directory hole found for htree leaf block 0 [ 520.082950][ T8259] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.721: path /53/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 520.110111][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.113277][ T8262] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 520.118975][ T8259] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.721: path /53/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 520.151098][ T8259] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.721: path /53/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 520.176817][ T8259] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.721: path /53/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 520.199082][ T8259] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.721: path /53/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 520.235552][ T8259] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.721: path /53/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 520.298832][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.316459][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.428689][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 520.526261][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.707004][ T8157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.860187][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.061292][ T8099] device veth1_vlan entered promiscuous mode [ 521.096234][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.120987][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.154129][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.187791][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.229256][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.984222][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 522.042604][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.085969][ T8099] device veth0_macvtap entered promiscuous mode [ 522.150346][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 522.179336][ T8099] device veth1_macvtap entered promiscuous mode [ 522.249564][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.326144][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.377942][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.408772][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.448562][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.470112][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.769109][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.844718][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.968358][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.140566][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.151053][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.161632][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.171720][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.183811][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.196192][ T8099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.199480][ T6962] EXT4-fs (loop2): unmounting filesystem. [ 523.210879][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.229594][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.297970][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.305499][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.345692][ T8157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.380699][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.833290][ T8295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.731'. [ 524.065754][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.212266][ T8305] blktrace: Concurrent blktraces are not allowed on loop0 [ 524.577258][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.661092][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.717267][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.804092][ T8308] loop3: detected capacity change from 0 to 2048 [ 524.827373][ T8308] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 524.838283][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.848561][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.862075][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.870443][ T8308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.873351][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.891787][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.901660][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.927198][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.965551][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.981245][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.138881][ T8316] random: crng reseeded on system resumption [ 526.614047][ T8099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.677451][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.686256][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.973559][ T8099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.997153][ T8099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.466404][ T8099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.482802][ T8099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.365303][ T3741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.401789][ T3741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.427258][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.445054][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.512909][ T7493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.532344][ T7493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.412284][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 530.488171][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 530.709180][ T8157] device veth0_vlan entered promiscuous mode [ 530.752056][ T8157] device veth1_vlan entered promiscuous mode [ 530.763380][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 531.022460][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.079290][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.104613][ T8366] No such timeout policy "syz0" [ 531.112929][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.169904][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.234705][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 531.315171][ T8157] device veth0_macvtap entered promiscuous mode [ 531.993552][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 532.008166][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 532.028613][ T8157] device veth1_macvtap entered promiscuous mode [ 532.043088][ T8363] binder: BINDER_SET_CONTEXT_MGR already set [ 532.057938][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 532.071584][ T8363] binder: 8361:8363 ioctl 4018620d 20000040 returned -16 [ 532.104161][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.115830][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.126186][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.136800][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.151739][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.172557][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.209623][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.222444][ T8363] binder: 8361:8363 ioctl c0306201 20000280 returned -22 [ 532.254312][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.264725][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.342910][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.360905][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.399437][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.621733][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.669212][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.679682][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.691180][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.742488][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.752404][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 533.763307][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 533.782689][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.796572][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.812696][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.833863][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.843960][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.856652][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.866719][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.878008][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.888997][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.899630][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.910996][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.921715][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.931629][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.942422][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.952373][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.968217][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.980692][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.191013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.204189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.216740][ T8157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.311345][ T8157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.469007][ T8157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.576166][ T8157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.787925][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.796065][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.873612][ T8404] tipc: Started in network mode [ 535.880890][ T8404] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 535.891571][ T8404] tipc: Enabling of bearer rejected, failed to enable media [ 535.899937][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.908578][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.919400][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.974856][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.919378][ T3683] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 538.427137][ T3683] usb 1-1: Using ep0 maxpacket: 16 [ 538.567751][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 538.577648][ T3683] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 538.588036][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 538.599976][ T3683] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 538.747387][ T3683] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 538.763228][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 538.773568][ T3683] usb 1-1: SerialNumber: syz [ 538.819272][ T3683] usb-storage 1-1:1.0: USB Mass Storage device detected [ 538.849514][ T3683] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 538.896745][ T8434] binder: BINDER_SET_CONTEXT_MGR already set [ 538.906533][ T8434] binder: 8433:8434 ioctl 4018620d 20000040 returned -16 [ 538.917244][ T8434] binder: 8433:8434 ioctl c0306201 20000280 returned -22 [ 538.957192][ T3683] scsi host1: usb-storage 1-1:1.0 [ 538.993332][ T3683] usb 1-1: USB disconnect, device number 10 [ 540.149103][ T8455] random: crng reseeded on system resumption [ 540.913219][ T48] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 540.922176][ T48] Bluetooth: hci8: Injecting HCI hardware error event [ 540.932784][ T3652] Bluetooth: hci8: hardware error 0x00 [ 540.976528][ T8456] trusted_key: encrypted_key: insufficient parameters specified [ 543.338367][ T3652] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 544.432409][ T48] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 544.479379][ T48] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 544.494326][ T48] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 544.534636][ T48] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 544.559606][ T48] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 544.573043][ T48] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 545.356080][ T8511] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 546.605770][ T8496] ip6gretap0 speed is unknown, defaulting to 1000 [ 546.698807][ T3652] Bluetooth: hci9: command tx timeout [ 547.319386][ T8527] loop3: detected capacity change from 0 to 512 [ 547.457720][ T8527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 547.557424][ T8527] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 547.660966][ T8527] EXT4-fs (loop3): orphan cleanup on readonly fs [ 548.025587][ T8527] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 548.130191][ T8527] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 548.203246][ T8527] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.785: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 548.430918][ T8527] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.785: couldn't read orphan inode 13 (err -117) [ 548.533498][ T8527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 548.556407][ T8527] EXT4-fs (loop3): unmounting filesystem. [ 548.797265][ T3652] Bluetooth: hci9: command tx timeout [ 549.341406][ T8527] loop3: detected capacity change from 0 to 256 [ 549.418521][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 549.438538][ T8527] exfat: Deprecated parameter 'utf8' [ 549.457429][ T8527] exfat: Deprecated parameter 'namecase' [ 549.463171][ T8527] exfat: Deprecated parameter 'namecase' [ 549.535716][ T8527] exfat: Deprecated parameter 'utf8' [ 549.624189][ T8527] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 549.727153][ T8562] rdma_rxe: rxe_register_device failed with error -23 [ 549.743344][ T8562] rdma_rxe: failed to add veth1_vlan [ 550.117958][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.128344][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.136578][ T8496] device bridge_slave_0 entered promiscuous mode [ 550.161928][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.186539][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.221785][ T8496] device bridge_slave_1 entered promiscuous mode [ 550.679090][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.857392][ T48] Bluetooth: hci9: command tx timeout [ 550.978080][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.161803][ T8496] team0: Port device team_slave_0 added [ 551.185925][ T8496] team0: Port device team_slave_1 added [ 551.284225][ T8577] program syz.0.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.312337][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.320329][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.349310][ T8578] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 551.361196][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.388398][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.405497][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.492515][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.566041][ T8496] device hsr_slave_0 entered promiscuous mode [ 553.056574][ T3652] Bluetooth: hci9: command tx timeout [ 553.066437][ T8496] device hsr_slave_1 entered promiscuous mode [ 553.083661][ T8496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.101609][ T8496] Cannot create hsr debugfs directory [ 553.496648][ T8600] loop3: detected capacity change from 0 to 512 [ 553.568216][ T8600] ext4: Unknown parameter 'func' [ 553.594208][ T8496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.259253][ T7424] blk_print_req_error: 19 callbacks suppressed [ 554.259268][ T7424] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 554.316715][ T8496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.508525][ T8607] loop3: detected capacity change from 0 to 2048 [ 554.527796][ T8607] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 554.541539][ T8577] block device autoloading is deprecated and will be removed. [ 554.631259][ T8607] syz.3.804: attempt to access beyond end of device [ 554.631259][ T8607] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 554.645481][ T8611] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.699591][ T48] Bluetooth: hci6: command 0x0c1a tx timeout [ 554.807361][ T8496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.312211][ T8496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.356036][ T8600] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 16777227 [ 555.364646][ T8600] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 555.376070][ T8600] Remounting filesystem read-only [ 555.381527][ T8600] NILFS (loop3): error -5 truncating bmap (ino=16) [ 555.434229][ T7436] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 555.441366][ T7436] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 555.449407][ T7436] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 555.458616][ T7436] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 555.468551][ T7436] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 555.477966][ T7436] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 555.488278][ T7436] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 555.496010][ T7436] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 555.518313][ T8496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 555.526157][ T7436] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 555.528783][ T8496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 555.537529][ T7436] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 555.550376][ T7436] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 555.561259][ T8496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 555.598068][ T8496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.666638][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.679837][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 555.689864][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 555.701256][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.716694][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 555.725348][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 555.734028][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.741119][ T5288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.751337][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 555.765516][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 555.774893][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 555.783765][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.790930][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.804810][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 555.823715][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 555.832699][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 555.845273][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 555.854358][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 555.866767][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 555.876842][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 555.889101][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.898956][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.912701][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.921667][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.933058][ T8496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 556.061674][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 556.070665][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 556.083445][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.112808][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 556.122893][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 556.135328][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.144218][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.153704][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 556.162759][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 556.171555][ T8496] device veth0_vlan entered promiscuous mode [ 556.185550][ T8496] device veth1_vlan entered promiscuous mode [ 556.209678][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 556.219110][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 556.228833][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 556.238332][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 556.249176][ T8496] device veth0_macvtap entered promiscuous mode [ 556.260322][ T8496] device veth1_macvtap entered promiscuous mode [ 556.278168][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.289259][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.299886][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.310389][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.321228][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.332027][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.342024][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.352890][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.362884][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.373351][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.383676][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.394528][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.404669][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.416873][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.426884][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.438141][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.448537][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.459278][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.471914][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.482441][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 556.491902][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 556.500857][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.510485][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.523409][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.535235][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.546697][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.557847][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.567991][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.580191][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.590375][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.601305][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.611450][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.633343][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.643266][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.653790][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.663984][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.674732][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.684918][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.695794][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.706996][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.717664][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.730884][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.742112][ T7506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.753203][ T7506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.764804][ T8496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.774174][ T8496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.783616][ T8496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.792454][ T8496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.873354][ T7506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.884883][ T7506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.904699][ T5288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.910157][ T7506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.923015][ T5288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.936914][ T7506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 558.624024][ T8637] loop3: detected capacity change from 0 to 2048 [ 558.838896][ T8637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 558.877255][ T3679] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 558.965125][ T8646] loop2: detected capacity change from 0 to 128 [ 559.044504][ T8646] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 559.247905][ T3679] usb 1-1: Using ep0 maxpacket: 32 [ 560.062601][ T7436] EXT4-fs (loop3): unmounting filesystem. [ 560.127278][ T3679] usb 1-1: device descriptor read/all, error -71 [ 561.702458][ T8669] rdma_rxe: rxe_register_device failed with error -23 [ 562.247216][ T8669] rdma_rxe: failed to add veth1_vlan [ 562.864978][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.992086][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.196666][ T8690] loop3: detected capacity change from 0 to 16 [ 563.205274][ T8690] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 564.379968][ T3683] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 564.687332][ T3683] usb 4-1: Using ep0 maxpacket: 32 [ 564.717150][ T3748] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 564.807998][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 564.937527][ T3648] Bluetooth: hci4: command 0x0c1a tx timeout [ 564.963489][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 564.998532][ T3748] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 565.027851][ T3683] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 565.067223][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.085117][ T3683] usb 4-1: config 0 descriptor?? [ 565.108775][ T8690] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 565.341647][ T3683] hub 4-1:0.0: USB hub found [ 565.638204][ T3748] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 565.738529][ T3683] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 565.817620][ T3748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.833349][ T3748] usb 3-1: config 0 descriptor?? [ 565.960112][ T3748] usb 3-1: bad CDC descriptors [ 565.968550][ T3748] usb 3-1: bad CDC descriptors [ 566.089240][ T8720] loop3: detected capacity change from 0 to 1024 [ 566.658286][ T8718] 9pnet_fd: Insufficient options for proto=fd [ 566.697513][ T3683] usbhid 4-1:0.0: can't add hid device: -71 [ 566.708106][ T3683] usbhid: probe of 4-1:0.0 failed with error -71 [ 566.767958][ T3683] usb 4-1: USB disconnect, device number 10 [ 568.015138][ T3678] usb 3-1: USB disconnect, device number 9 [ 568.354768][ T8741] xt_CONNSECMARK: invalid mode: 0 [ 569.420616][ T8746] rdma_rxe: rxe_register_device failed with error -23 [ 569.437919][ T8746] rdma_rxe: failed to add veth1_vlan [ 570.423752][ T8749] xt_limit: Overflow, try lower: 0/0 [ 572.147276][ T3648] Bluetooth: hci9: command tx timeout [ 575.210729][ T8785] 9pnet_fd: Insufficient options for proto=fd [ 575.756438][ T8792] tls_set_device_offload_rx: netdev not found [ 576.460286][ T3678] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 576.559794][ T8799] ipt_REJECT: ECHOREPLY no longer supported. [ 576.609434][ T8799] netlink: 'syz.4.861': attribute type 8 has an invalid length. [ 576.628205][ T8799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.727394][ T3678] usb 1-1: Using ep0 maxpacket: 32 [ 576.751162][ T8802] netlink: 1300 bytes leftover after parsing attributes in process `syz.4.861'. [ 576.847323][ T3678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 577.025938][ T3678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 577.038034][ T3678] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 577.048074][ T3678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.063348][ T3678] usb 1-1: config 0 descriptor?? [ 577.087465][ T8787] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 577.648410][ T8818] loop3: detected capacity change from 0 to 256 [ 577.786525][ T3678] hub 1-1:0.0: USB hub found [ 577.907283][ T3678] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 578.777404][ T3678] usbhid 1-1:0.0: can't add hid device: -71 [ 578.783613][ T3678] usbhid: probe of 1-1:0.0 failed with error -71 [ 579.537935][ T3678] usb 1-1: USB disconnect, device number 13 [ 579.604976][ T8840] loop2: detected capacity change from 0 to 512 [ 579.630026][ T8840] ext4: Unknown parameter 'func' [ 581.189907][ T8840] loop2: detected capacity change from 0 to 2048 [ 581.770053][ T8840] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 581.917213][ T8864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 581.932957][ T8840] syz.2.870: attempt to access beyond end of device [ 581.932957][ T8840] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 583.353760][ T27] INFO: task syz.0.543:7301 blocked for more than 143 seconds. [ 583.478467][ T27] Not tainted 6.1.110-syzkaller #0 [ 583.484284][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.355668][ T27] task:syz.0.543 state:D stack:25752 pid:7301 ppid:4988 flags:0x00004004 [ 584.475131][ T27] Call Trace: [ 584.479575][ T27] [ 584.482671][ T27] __schedule+0x143f/0x4570 [ 584.487879][ T27] ? release_firmware_map_entry+0x186/0x186 [ 584.494172][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 584.500636][ T27] ? print_irqtrace_events+0x210/0x210 [ 584.506332][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 584.512002][ T27] schedule+0xbf/0x180 [ 584.516110][ T27] ? down_read+0x69f/0xa30 [ 584.520924][ T27] schedule_preempt_disabled+0xf/0x20 [ 584.526428][ T27] down_read+0x6ff/0xa30 [ 584.538983][ T27] ? __down_common+0x8b0/0x8b0 [ 584.549020][ T8840] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 16777227 [ 584.552855][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 584.562823][ T8840] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 584.601730][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 584.606992][ T27] iterate_supers+0xac/0x1e0 [ 584.627242][ T8840] Remounting filesystem read-only [ 584.644249][ T27] ? ksys_sync+0x1c0/0x1c0 [ 584.650019][ T8840] NILFS (loop2): error -5 truncating bmap (ino=16) [ 584.668313][ T27] ksys_sync+0xb9/0x1c0 [ 584.672541][ T27] ? sync_filesystem+0x220/0x220 [ 584.737433][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 584.752793][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 584.759399][ T27] __do_sys_sync+0xa/0x10 [ 584.767368][ T27] do_syscall_64+0x3b/0xb0 [ 584.777282][ T27] ? clear_bhb_loop+0x45/0xa0 [ 584.783230][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.789225][ T27] RIP: 0033:0x7f994b37def9 [ 584.793898][ T27] RSP: 002b:00007f994c24a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 584.815058][ T27] RAX: ffffffffffffffda RBX: 00007f994b535f80 RCX: 00007f994b37def9 [ 584.823404][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.836498][ T27] RBP: 00007f994b3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 584.864415][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.885464][ T27] R13: 0000000000000000 R14: 00007f994b535f80 R15: 00007fffe2bc4678 [ 584.893942][ T27] [ 584.898898][ T8496] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 584.906671][ T8496] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 584.926803][ T8496] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 584.935927][ T27] INFO: task syz.0.543:7305 blocked for more than 145 seconds. [ 584.943870][ T8496] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 584.967334][ T8496] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 584.976519][ T8496] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 584.988139][ T27] Not tainted 6.1.110-syzkaller #0 [ 584.993826][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.003755][ T8496] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 585.015302][ T27] task:syz.0.543 state:D stack:22008 pid:7305 ppid:4988 flags:0x00004004 [ 585.026164][ T8496] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 585.035417][ T27] Call Trace: [ 585.038824][ T27] [ 585.041777][ T27] __schedule+0x143f/0x4570 [ 585.046324][ T27] ? release_firmware_map_entry+0x186/0x186 [ 585.052356][ T8496] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 585.061396][ T8496] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 585.068809][ T8496] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 585.077205][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 585.094347][ T27] ? print_irqtrace_events+0x210/0x210 [ 585.101944][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 585.107319][ T27] schedule+0xbf/0x180 [ 585.112358][ T27] ? down_read+0x69f/0xa30 [ 585.117325][ T27] schedule_preempt_disabled+0xf/0x20 [ 585.123543][ T27] down_read+0x6ff/0xa30 [ 585.132727][ T27] ? __down_common+0x8b0/0x8b0 [ 585.143408][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 585.159686][ T8880] rdma_rxe: rxe_register_device failed with error -23 [ 585.166634][ T8880] rdma_rxe: failed to add veth1_vlan [ 585.178443][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 585.183911][ T27] iterate_supers+0xac/0x1e0 [ 585.207122][ T27] ? ksys_sync+0x1c0/0x1c0 [ 585.211891][ T27] ksys_sync+0xb9/0x1c0 [ 585.216337][ T27] ? sync_filesystem+0x220/0x220 [ 585.221677][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 585.227911][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 585.234070][ T27] __do_sys_sync+0xa/0x10 [ 585.239173][ T27] do_syscall_64+0x3b/0xb0 [ 585.243697][ T27] ? clear_bhb_loop+0x45/0xa0 [ 585.252984][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.262428][ T27] RIP: 0033:0x7f994b37def9 [ 585.266970][ T27] RSP: 002b:00007f994c229038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 585.276234][ T27] RAX: ffffffffffffffda RBX: 00007f994b536058 RCX: 00007f994b37def9 [ 585.285134][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.295723][ T27] RBP: 00007f994b3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 585.304294][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.312997][ T27] R13: 0000000000000000 R14: 00007f994b536058 R15: 00007fffe2bc4678 [ 585.323465][ T27] [ 585.348250][ T27] [ 585.348250][ T27] Showing all locks held in the system: [ 585.404529][ T27] 1 lock held by rcu_tasks_kthre/12: [ 585.483496][ T27] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 585.502274][ T27] 1 lock held by rcu_tasks_trace/13: [ 585.527937][ T27] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 585.541793][ T27] 1 lock held by khungtaskd/27: [ 585.561808][ T27] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 585.610123][ T27] 2 locks held by getty/3392: [ 585.631809][ T27] #0: ffff88814b935098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 585.736566][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 585.751011][ T27] 3 locks held by kworker/u4:15/5288: [ 585.760608][ T27] 1 lock held by syz-executor/5526: [ 585.765838][ T27] #0: ffff888063c120e0 (&type->s_umount_key#97){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 585.789149][ T27] 1 lock held by syz.0.543/7301: [ 585.797263][ T27] #0: ffff888063c120e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 585.808498][ T27] 1 lock held by syz.0.543/7305: [ 585.813547][ T27] #0: ffff888063c120e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 585.825328][ T27] 1 lock held by syz.1.661/7988: [ 585.830387][ T27] #0: ffff888063c120e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 585.840735][ T27] 1 lock held by syz.1.661/7991: [ 585.845755][ T27] #0: ffff888063c120e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 585.865534][ T27] 1 lock held by syz.4.673/8044: [ 585.877437][ T27] #0: ffff888063c120e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 585.887909][ T27] 1 lock held by syz.2.745/8372: [ 585.892939][ T27] #0: ffff888063c120e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 585.904606][ T27] [ 585.908384][ T27] ============================================= [ 585.908384][ T27] [ 585.916810][ T27] NMI backtrace for cpu 1 [ 585.921135][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0 [ 585.929026][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 585.939080][ T27] Call Trace: [ 585.942343][ T27] [ 585.945259][ T27] dump_stack_lvl+0x1e3/0x2cb [ 585.949946][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 585.955411][ T27] ? panic+0x764/0x764 [ 585.959482][ T27] ? vprintk_emit+0x622/0x740 [ 585.964162][ T27] ? printk_sprint+0x490/0x490 [ 585.968925][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 585.974029][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 585.978961][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 585.985100][ T27] ? _printk+0xd1/0x111 [ 585.989245][ T27] ? panic+0x764/0x764 [ 585.993311][ T27] ? __wake_up_klogd+0xcc/0x100 [ 585.998148][ T27] ? panic+0x764/0x764 [ 586.002204][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 586.008262][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 586.014334][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 586.020321][ T27] watchdog+0xf88/0xfd0 [ 586.024494][ T27] ? watchdog+0x1f8/0xfd0 [ 586.028862][ T27] kthread+0x28d/0x320 [ 586.032932][ T27] ? hungtask_pm_notify+0x50/0x50 [ 586.037951][ T27] ? kthread_blkcg+0xd0/0xd0 [ 586.042534][ T27] ret_from_fork+0x1f/0x30 [ 586.046959][ T27] [ 586.050907][ T27] Sending NMI from CPU 1 to CPUs 0: [ 586.056140][ C0] NMI backtrace for cpu 0 [ 586.056151][ C0] CPU: 0 PID: 3694 Comm: kworker/u4:6 Not tainted 6.1.110-syzkaller #0 [ 586.056167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 586.056177][ C0] Workqueue: bat_events batadv_nc_worker [ 586.056201][ C0] RIP: 0010:lock_release+0x622/0xa20 [ 586.056224][ C0] Code: c7 84 24 90 00 00 00 00 00 00 00 9c 8f 84 24 90 00 00 00 42 80 3c 3b 00 74 08 4c 89 f7 e8 b6 81 77 00 f6 84 24 91 00 00 00 02 <75> 6f 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 4b [ 586.056242][ C0] RSP: 0018:ffffc900047c7a00 EFLAGS: 00000046 [ 586.056254][ C0] RAX: 0000000000000001 RBX: 1ffff920008f8f52 RCX: ffffc900047c7a03 [ 586.056265][ C0] RDX: 0000000000000002 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5d6dc0 [ 586.056275][ C0] RBP: ffffc900047c7b38 R08: dffffc0000000000 R09: fffffbfff1d33c96 [ 586.056286][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920008f8f4c [ 586.056297][ C0] R13: 0000000000000246 R14: ffffc900047c7a90 R15: dffffc0000000000 [ 586.056307][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 586.056321][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.056331][ C0] CR2: 00007fa89c108178 CR3: 000000007e263000 CR4: 00000000003506f0 [ 586.056344][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 586.056353][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 586.056362][ C0] Call Trace: [ 586.056367][ C0] [ 586.056373][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 586.056389][ C0] ? read_lock_is_recursive+0x10/0x10 [ 586.056411][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 586.056426][ C0] ? nmi_handle+0x25/0x440 [ 586.056455][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 586.056477][ C0] ? nmi_handle+0x12e/0x440 [ 586.056498][ C0] ? nmi_handle+0x25/0x440 [ 586.056518][ C0] ? lock_release+0x622/0xa20 [ 586.056538][ C0] ? default_do_nmi+0x62/0x150 [ 586.056553][ C0] ? exc_nmi+0xa8/0x100 [ 586.056567][ C0] ? end_repeat_nmi+0x16/0x31 [ 586.056593][ C0] ? lock_release+0x622/0xa20 [ 586.056613][ C0] ? lock_release+0x622/0xa20 [ 586.056634][ C0] ? lock_release+0x622/0xa20 [ 586.056654][ C0] [ 586.056658][ C0] [ 586.056666][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 586.056687][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 586.056706][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 586.056724][ C0] ? __rwlock_init+0x140/0x140 [ 586.056740][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 586.056760][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 586.056780][ C0] _raw_spin_unlock_bh+0x17/0x30 [ 586.056797][ C0] ? batadv_nc_purge_paths+0x3b0/0x3b0 [ 586.056817][ C0] batadv_nc_purge_paths+0x30e/0x3b0 [ 586.056844][ C0] batadv_nc_worker+0x324/0x610 [ 586.056863][ C0] ? batadv_nc_worker+0xc7/0x610 [ 586.056884][ C0] ? process_one_work+0x7a9/0x11d0 [ 586.056901][ C0] process_one_work+0x8a9/0x11d0 [ 586.056925][ C0] ? worker_detach_from_pool+0x260/0x260 [ 586.056944][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 586.056961][ C0] ? kthread_data+0x4e/0xc0 [ 586.056983][ C0] ? wq_worker_running+0x97/0x190 [ 586.056998][ C0] worker_thread+0xa47/0x1200 [ 586.057027][ C0] kthread+0x28d/0x320 [ 586.057041][ C0] ? worker_clr_flags+0x190/0x190 [ 586.057055][ C0] ? kthread_blkcg+0xd0/0xd0 [ 586.057083][ C0] ret_from_fork+0x1f/0x30 [ 586.057108][ C0] [ 586.391017][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 586.397898][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0 [ 586.405794][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 586.415835][ T27] Call Trace: [ 586.419120][ T27] [ 586.422054][ T27] dump_stack_lvl+0x1e3/0x2cb [ 586.426739][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 586.432187][ T27] ? panic+0x764/0x764 [ 586.436269][ T27] ? llist_add_batch+0x160/0x1d0 [ 586.441217][ T27] ? vscnprintf+0x59/0x80 [ 586.445545][ T27] panic+0x318/0x764 [ 586.449439][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 586.455592][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 586.460956][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 586.467110][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 586.473287][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 586.479439][ T27] watchdog+0xfc7/0xfd0 [ 586.483601][ T27] ? watchdog+0x1f8/0xfd0 [ 586.487929][ T27] kthread+0x28d/0x320 [ 586.491998][ T27] ? hungtask_pm_notify+0x50/0x50 [ 586.497101][ T27] ? kthread_blkcg+0xd0/0xd0 [ 586.501697][ T27] ret_from_fork+0x1f/0x30 [ 586.506123][ T27] [ 586.509260][ T27] Kernel Offset: disabled [ 586.513583][ T27] Rebooting in 86400 seconds..