last executing test programs: 4m59.224115543s ago: executing program 4 (id=162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0x2, 0x10, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 4m57.735310757s ago: executing program 4 (id=165): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 4m56.121985234s ago: executing program 4 (id=167): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 4m51.654103826s ago: executing program 4 (id=170): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1d}) socket$inet_sctp(0x2, 0x5, 0x84) 4m50.274123558s ago: executing program 4 (id=173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) bind$inet6(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 4m47.654271921s ago: executing program 3 (id=175): r0 = open(0x0, 0x141080, 0x0) r1 = openat(r0, 0x0, 0x2c000, 0x9) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2b) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x63c1, 0x1, 0x3, 0x0, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r10, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) 4m45.148380122s ago: executing program 3 (id=177): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4m42.028780973s ago: executing program 3 (id=180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000300)='gadgetfs\x00', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4m41.818842216s ago: executing program 4 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) userfaultfd(0x801) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x11, r1, 0x100000000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x204100, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)}, 0x10022) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 4m40.389673639s ago: executing program 3 (id=184): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x566, &(0x7f0000001080)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000000c0)={0x10080, 0x0, 0x17}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450900000000000000019078ac1e0001ac1414aa04009078e00000e04500000000000000001100c70000"], 0x0) r1 = fcntl$getown(r0, 0x9) prlimit64(r1, 0xe, &(0x7f0000000000)={0x81, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0xfffffe2d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xe1\xae\x17X\xcd\xd7\xe9\xc0/\xc2\xf2\xe0~B\x1a\xce\x11\x03\xa8k\xafp=\x06&U\"t\xb2\xc7\xb8\x8a\xdbR\xa4oy[^9A\xfb3\x88*\x7faR\xea[\x8b\xb9\xa0\x0e\x88{\x81\xb5\x91\x93\"\xd7L\x11\x03\x91', 0x2) 4m38.126536657s ago: executing program 3 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access', @ANYRESDEC]) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'wg2\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xb, 0x523, [0x1]}}) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x1f, &(0x7f0000000500), 0xfd, 0x551d, &(0x7f00000079c0)="$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") 4m32.541152387s ago: executing program 3 (id=191): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000080)={[{@noquota}, {@noblock_validity}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@debug}, {@nobh}]}, 0x80, 0x541, &(0x7f0000000bc0)="$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") copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0) socket$inet6(0xa, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x0, {0x2, 0x4e24, @multicast1=0xe000cc02}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m24.39367061s ago: executing program 32 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) userfaultfd(0x801) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x11, r1, 0x100000000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x204100, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)}, 0x10022) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 4m14.995222763s ago: executing program 33 (id=191): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000080)={[{@noquota}, {@noblock_validity}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@debug}, {@nobh}]}, 0x80, 0x541, &(0x7f0000000bc0)="$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") copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0) socket$inet6(0xa, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x0, {0x2, 0x4e24, @multicast1=0xe000cc02}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 33.350923654s ago: executing program 2 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 31.74538447s ago: executing program 2 (id=652): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffff0) r4 = msgget(0x1, 0x40) msgsnd(r4, 0x0, 0xb6, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x840, 0x0) 31.1332746s ago: executing program 2 (id=658): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x48, @local, @local, 0x7, 0x8000, 0x202, 0x4}}) 30.963117163s ago: executing program 2 (id=659): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6b, &(0x7f00000002c0)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "eb669f", 0x31, 0x6, 0x0, @mcast2, @loopback, {[@fragment={0x2f, 0x0, 0x6, 0x0, 0x0, 0x6, 0x66}], @payload_named={{{{{0x29, 0x0, 0x1, 0x0, 0x1, 0xa, 0x0, 0x2, 0x6, 0x0, 0x2, 0x2, 0x4, 0x2, 0x6, 0x8, 0x2, 0x4e23, 0x4e22}, 0x4, 0x3}, 0x0, 0x4}}, [0x0]}}}}}}, 0x0) 26.536300826s ago: executing program 2 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2], 0x44}}, 0x0) 25.200785157s ago: executing program 2 (id=672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 15.080010403s ago: executing program 0 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a01040000000000000000020000020900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 13.630604726s ago: executing program 0 (id=703): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) epoll_create1(0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 11.871302305s ago: executing program 0 (id=707): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="013f5e0c4eaa6035b286a05ad2cbf6ceb6b4f8857887209c639f55bd4ca21768b42eeee1fe270b10650dec195399e97b5c92203937a3783cb425f2e75f5b798de95c5127ab7b7d5dcc5a7d075fa0c84271bd431467c0a9182239a790"], 0x1, 0x1fb, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r3, 0xd530000) syz_genetlink_get_family_id$nfc(&(0x7f0000000880), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000700)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.702131624s ago: executing program 0 (id=711): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = semget$private(0x0, 0x1, 0x10) semtimedop(r4, 0x0, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) 10.511242878s ago: executing program 1 (id=713): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x6194, &(0x7f0000004a40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 10.3776505s ago: executing program 5 (id=714): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000640)=ANY=[@ANYBLOB='nobarrier,decompose,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c756964bd080076e93de2cf19bb625994a0908a50e5639cdb4a0a28b1e4497bcc7403779d5def22f0188f29be9d852e55b0f1247c86df0dc7fa6867af5c0f59efb3c2d2648990b79a6dc5012055f5b07bc8678578ddc72a00"/102, @ANYRESHEX=0x0, @ANYBLOB=',force,nls=iso8859-2,\x00'], 0x3, 0x6af, &(0x7f0000000a40)="$eJzs3U1sHGcZB/D/bJx1Nkip26ZpQEixGqmCRiR2ViVBQmpACOUQoQguvVqJ01jZpJXjorRCZAMUJE6cUA8cipA59IQQQionRDkjIXHh5HskbhxyAIxmdna9tjeOncRet/39pPG8s+/XM0/nY3e20Qb4zLr4eg52U+TiqUt3yu2V5XZnZbl9s19OMpmkkUz0VilaSfFxciG9JZ8vX6yHKx42z6v3Pyom3v+w3duaqJeqfWOrfpuMbNlNDg02DiSZ7hX/s40BG6PHq5ZqnCtr4z2mYhB3mbCT/cTBuK1u0l2rHHVqrLf98xbYt+727pubTCWH07u7lu8DUl8dHn1lGL8tr03dvYsDAAAAdsvIz/LDnnmQB7mTI3sTDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHw6FL3fDCzqpdEvT6fo//5/c+g39ZtjDvcJvXetWn33mXEHAgAAAAAAAABP5MSDPMidHOlvrxbVd/4vVRtHq7+fy9u5nfks5nTuZC5LWcpiZpNMDQ3UvDO3tLQ4u7nnL1P2XF1dvVv3PDuy59n1cXU3Bjrq/zTY1AgAAAAAAAAAPrN+lItr3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB+UCQHeqtqOdovT6UxkeRQkmYxPWjeHGuwT8Gfxx0AAAAA7L5WvT5S/K9XWC2qz/zHqs/9h/J2bmUpC1lKJ/O5Wj0L6H3qb/y92+6sLLdvlsvmgb/xrx3FUY2Y3rOH0TPPVC1eGPS4mG/nezmV6VzOYhby/cxlKfOZzreq0lyKTNVPL6ZWllvpx7o53gvrti5vjO3EULmM73gVSSvXslDFdjpXmv3QG3W740Oz/bGZbJjxXpmd4rXaNnN0tV6Xe/SLer0/TFV7fnCQkZk692U2nh3O++bc7/A42TjTbBqDZ1BH12YpNzfO9Fg5P1yvy1z/dHdzvsNHaesz0f15udU/+o5tnfPky//4y+XrjVs3rl+7fWr/HEaPaeMx0R7KxIvbykSnzET3CTJx6Enif3qadTZ6V9GdXS1fqvoeyUK+kzdzNfM5l5nM5nxm8rWcTTtnh/L6wtZ5rc61xs7OtZNfqgvlPelnQ/emPTP5sIoyr88O5XX4SjdV1Q2/spal57aRpaKZ0Vn658hQJr5QF8o5fjx0xxm/jZmYHcrE81tn4tf/XU1yu3PrxuL1ube2Od/L9bo8bd9bf23+zVPZoZ2rd7c8Xp4r/2Old9sYPjrKuuf7dRvy1ay/cZmoB1tX10x1PvfqHnWmliMduzdqpF7diyNnaVd1x4fq1r3LyZvpDN6F1Pb8JAVgGw6/crjZut/6W+uD1k9a11uXDn1z8vzkF5s5+NeJPx34XeO3ja8Xr+SD/DBHxh0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Gtx+590bc53O/OI+LKTxlAe8N7Kqn4reK80RbU5kH2Tjk1GY3OqI+n2SLbo3xxFzK8m+SF0mdn2KySQjqi4NXmkljUE8SW7skx+4A3bDmaWbb525/c67X1m4OffG/Bvzt86eP/faufZXZ++eubbQmZ/p/R13lMBuWHsbMO5IAAAAAAAAAAAAgO3ai3/eMGLaojuGfQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+mS6+noPdFJmdOT1Tbq8stzsry0Vd2+6stZxI0khS/CApPk4upLdkami44mHzvHr/o1+9/P6H7bWxJvrtGxv6/eHfq6s73ItuvWQ6yYF6/WiT2xrvytB43R0G1lMM9rBM2Ml+4mDc/h8AAP//6QMELQ==") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x7400}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3ba) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a50000000060a090400000000000000000200000024000480200001800d00010073796e70726f7879000000000c0002800800034000e6880a0900010073797a30000000000900"], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000600)={0x0, 0x0, 0x23, 0x0}) 9.607899122s ago: executing program 34 (id=672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8.448352561s ago: executing program 6 (id=717): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 8.144936656s ago: executing program 1 (id=718): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_uring_setup(0x39e5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfea7) copy_file_range(r6, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1}, 0x17ba}], 0x1, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000000)=0x1e) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) 7.248082331s ago: executing program 6 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x9, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 7.117133793s ago: executing program 5 (id=720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0004000280", @ANYRES32=r2], 0x44}}, 0x0) 6.790773019s ago: executing program 5 (id=721): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x101080, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000300)={[{@lastblock={'lastblock', 0x3d, 0x5}}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmode={'dmode', 0x3d, 0x4}}, {@dmode={'dmode', 0x3d, 0x86}}]}, 0x1, 0xc59, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) 6.509979163s ago: executing program 6 (id=722): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="013f5e0c4eaa6035b286a05ad2cbf6ceb6b4f8857887209c639f55bd4ca21768b42eeee1fe270b10650dec195399e97b5c92203937a3783cb425f2e75f5b798de95c5127ab7b7d5dcc5a7d075fa0c84271bd431467c0a9182239a790"], 0x1, 0x1fb, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r3, 0xd530000) syz_genetlink_get_family_id$nfc(&(0x7f0000000880), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000700)="$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") timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.815979371s ago: executing program 6 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.815654161s ago: executing program 1 (id=724): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x1ff, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0xe}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x45, 0x7fff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x106, 0x3, 0xd83f}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 4.046846053s ago: executing program 5 (id=725): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) 3.890562886s ago: executing program 6 (id=726): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) ioctl$TIOCNOTTY(r3, 0x5422) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x2, &(0x7f00000000c0)) 3.873702496s ago: executing program 0 (id=727): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001900)={{0x2, 0x0, 0x0, 0x0, 0xd0}}) 3.572194461s ago: executing program 1 (id=728): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 1.670673422s ago: executing program 0 (id=729): ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0d3fb1252ae0536a", "1ee09d57791dfad6fd4d920da1c3641f", "d1f83d98", "6c3152ef765092f2"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1.618737723s ago: executing program 5 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r2], 0x44}}, 0x0) 1.617327353s ago: executing program 1 (id=731): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RETRIES(r5, 0x701, 0x5) ioctl$KDSIGACCEPT(r4, 0x5607, 0x1) 895.528965ms ago: executing program 6 (id=732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x6cc84, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 154.840627ms ago: executing program 1 (id=733): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="013f5e0c4eaa6035b286a05ad2cbf6ceb6b4f8857887209c639f55bd4ca21768b42eeee1fe270b10650dec195399e97b5c92203937a3783cb425f2e75f5b798de95c5127ab7b7d5dcc5a7d075fa0c84271bd431467c0a9182239a790"], 0x1, 0x1fb, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r3, 0xd530000) syz_genetlink_get_family_id$nfc(&(0x7f0000000880), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000700)="$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") timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=734): unshare(0x20040400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): e failed sanity check [ 169.981299][ T4774] F2FS-fs (loop2): invalid crc value [ 169.998692][ T4774] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 171.976281][ T4494] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.887011][ T4801] loop0: detected capacity change from 0 to 256 [ 174.967124][ T4801] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 175.095051][ T4801] exFAT-fs (loop0): hint_cluster is invalid (17) [ 177.899297][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 178.602868][ T4812] loop2: detected capacity change from 0 to 512 [ 178.768036][ T4812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.244217][ T4812] EXT4-fs (loop2): 1 truncate cleaned up [ 179.355214][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.912844][ T4826] loop0: detected capacity change from 0 to 128 [ 180.808620][ T4826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.826888][ T4826] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.919266][ T4829] loop3: detected capacity change from 0 to 16 [ 180.936377][ T4829] erofs: (device loop3): mounted with root inode @ nid 36. [ 181.578391][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 181.670009][ T4826] EXT4-fs (loop0): unmounting filesystem. [ 182.650575][ T4845] loop4: detected capacity change from 0 to 16 [ 183.275147][ T4847] loop0: detected capacity change from 0 to 256 [ 183.339827][ T4845] erofs: (device loop4): mounted with root inode @ nid 36. [ 183.419121][ T4847] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 183.482901][ T4847] exFAT-fs (loop0): hint_cluster is invalid (17) [ 185.573882][ T4856] loop4: detected capacity change from 0 to 1024 [ 185.653333][ T4856] EXT4-fs (loop4): Test dummy encryption mode enabled [ 185.747400][ T4856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.405369][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 189.718993][ T4882] loop2: detected capacity change from 0 to 512 [ 189.726679][ T4882] EXT4-fs: Ignoring removed nobh option [ 191.284156][ T4884] tty tty23: ldisc open failed (-12), clearing slot 22 [ 191.519309][ T4882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.567756][ T4882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 191.577197][ T4882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 191.584788][ T4882] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 191.600121][ T4882] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 191.618231][ T4882] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 191.636940][ T4882] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.122: couldn't read orphan inode 13 (err -117) [ 191.649683][ T4882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.699615][ T4892] device vlan2 entered promiscuous mode [ 191.706221][ T4892] device syz_tun entered promiscuous mode [ 191.986663][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 192.290882][ T4903] xt_TCPMSS: Only works on TCP SYN packets [ 195.561456][ T4926] loop2: detected capacity change from 0 to 16 [ 196.606827][ T4925] 9pnet_fd: Insufficient options for proto=fd [ 198.435505][ T4925] loop0: detected capacity change from 0 to 40427 [ 199.289792][ T4927] loop3: detected capacity change from 0 to 40427 [ 202.955950][ T4926] erofs: (device loop2): erofs_read_superblock: cannot read erofs superblock [ 203.397269][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.403626][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.412562][ T4925] F2FS-fs (loop0): Wrong CP boundary, start(512) end(516) blocks(1024) [ 203.413575][ T4927] F2FS-fs (loop3): Wrong CP boundary, start(512) end(516) blocks(1024) [ 203.420946][ T4925] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.429210][ T4927] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 203.466583][ T4927] F2FS-fs (loop3): invalid crc value [ 203.467084][ T4925] F2FS-fs (loop0): invalid crc value [ 203.472081][ T4927] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 203.477388][ T4925] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 207.194325][ T4944] loop1: detected capacity change from 0 to 40427 [ 207.273493][ T4944] F2FS-fs (loop1): Wrong CP boundary, start(512) end(516) blocks(1024) [ 207.282212][ T4944] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 207.309207][ T4944] F2FS-fs (loop1): invalid crc value [ 207.376018][ T4944] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 207.614582][ T4944] F2FS-fs (loop1): recover fsync data on readonly fs [ 207.637924][ T4944] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 207.646382][ T4944] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.663851][ T4951] loop4: detected capacity change from 0 to 256 [ 210.183392][ T4955] loop0: detected capacity change from 0 to 512 [ 210.190537][ T4955] EXT4-fs: Ignoring removed nobh option [ 210.633868][ T4955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.652872][ T4955] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 210.670032][ T4955] EXT4-fs (loop0): orphan cleanup on readonly fs [ 210.689205][ T4955] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 210.705732][ T4955] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 211.483448][ T4955] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.139: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 211.507611][ T4955] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.139: couldn't read orphan inode 13 (err -117) [ 211.520144][ T4955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.801745][ T4961] loop3: detected capacity change from 0 to 1024 [ 212.056276][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 212.128308][ T4961] EXT4-fs (loop3): Test dummy encryption mode enabled [ 212.976439][ T4255] Bluetooth: hci1: command 0x0406 tx timeout [ 212.976470][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 212.976561][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 212.985997][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 212.988837][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 213.157944][ T4961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.200875][ T4982] 9pnet_fd: Insufficient options for proto=fd [ 216.413367][ T4982] loop1: detected capacity change from 0 to 40427 [ 216.449037][ T4982] F2FS-fs (loop1): Wrong CP boundary, start(512) end(516) blocks(1024) [ 216.457738][ T4982] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.474089][ T4982] F2FS-fs (loop1): invalid crc value [ 216.548116][ T4982] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 216.629088][ T4982] F2FS-fs (loop1): recover fsync data on readonly fs [ 216.636540][ T4982] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 216.643767][ T4982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.098142][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 217.202653][ T4991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.573327][ T4996] loop2: detected capacity change from 0 to 256 [ 217.649356][ T4996] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 218.464941][ T4997] xt_CT: No such helper "snmp_trap" [ 222.072601][ T5015] loop1: detected capacity change from 0 to 32768 [ 222.166817][ T5015] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 222.176583][ T5015] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 222.221376][ T5015] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 222.899985][ T5020] 9pnet_fd: Insufficient options for proto=fd [ 223.226918][ T5020] loop3: detected capacity change from 0 to 40427 [ 223.266091][ T5020] F2FS-fs (loop3): Wrong CP boundary, start(512) end(516) blocks(1024) [ 223.274512][ T5020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 223.302576][ T5020] F2FS-fs (loop3): invalid crc value [ 223.374894][ T5015] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 223.398929][ T5020] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 223.628863][ T5020] F2FS-fs (loop3): recover fsync data on readonly fs [ 223.636539][ T5020] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 223.643898][ T5020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 227.880451][ T5042] loop0: detected capacity change from 0 to 1024 [ 229.360116][ T4358] hfsplus: b-tree write err: -5, ino 4 [ 230.195159][ T5055] loop2: detected capacity change from 0 to 256 [ 230.563252][ T5055] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 230.689562][ T5055] exFAT-fs (loop2): hint_cluster is invalid (17) [ 231.032074][ T5059] 9pnet_fd: Insufficient options for proto=fd [ 231.530559][ T5059] loop3: detected capacity change from 0 to 40427 [ 231.600655][ T5059] F2FS-fs (loop3): Wrong CP boundary, start(512) end(516) blocks(1024) [ 231.610295][ T5059] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 231.628495][ T5059] F2FS-fs (loop3): invalid crc value [ 231.747948][ T5059] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 232.098773][ T5059] F2FS-fs (loop3): recover fsync data on readonly fs [ 232.110814][ T5059] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 232.119314][ T5059] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 235.164348][ T5077] loop2: detected capacity change from 0 to 512 [ 235.415609][ T5077] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.435577][ T5077] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 235.740484][ T5077] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 235.959533][ T5077] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 236.236134][ T5077] System zones: 0-2, 18-18, 34-34 [ 236.358898][ T5077] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 236.591089][ T5077] EXT4-fs (loop2): 1 truncate cleaned up [ 236.637270][ T5077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.961063][ T5098] ipt_CLUSTERIP: Please specify destination IP [ 238.413373][ T5097] xt_CT: No such helper "snmp_trap" [ 238.847190][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 241.030871][ T5107] smc: net device bond0 applied user defined pnetid SYZ0 [ 241.044298][ T5107] smc: net device bond0 erased user defined pnetid SYZ0 [ 241.899776][ T5110] loop2: detected capacity change from 0 to 32768 [ 245.189822][ T5118] loop0: detected capacity change from 0 to 4096 [ 245.312098][ T5118] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 246.368402][ T5137] loop2: detected capacity change from 0 to 1024 [ 246.381559][ T5139] loop3: detected capacity change from 0 to 164 [ 246.416644][ T5137] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 246.481616][ T5137] EXT4-fs (loop2): invalid journal inode [ 246.490093][ T5137] EXT4-fs (loop2): can't get journal size [ 246.498632][ T5137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.664225][ T5145] Unsupported NM flag settings (8) [ 247.783029][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 247.804143][ T5145] Unsupported NM flag settings (8) [ 247.806772][ T5142] xt_TCPMSS: Only works on TCP SYN packets [ 248.195214][ T5145] Unsupported NM flag settings (8) [ 248.496707][ T5150] loop2: detected capacity change from 0 to 512 [ 248.540038][ T5150] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.597196][ T5150] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 248.667144][ T5150] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 248.676943][ T5150] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 248.685055][ T5150] System zones: 0-2, 18-18, 34-34 [ 248.718574][ T5150] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 248.841841][ T5150] EXT4-fs (loop2): 1 truncate cleaned up [ 248.854082][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.927025][ T5160] 9pnet_fd: Insufficient options for proto=fd [ 250.340026][ T5160] loop3: detected capacity change from 0 to 40427 [ 250.394495][ T5160] F2FS-fs (loop3): Wrong CP boundary, start(512) end(516) blocks(1024) [ 250.402951][ T5160] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 250.425717][ T5160] F2FS-fs (loop3): invalid crc value [ 250.518631][ T5160] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 250.624360][ T5160] F2FS-fs (loop3): recover fsync data on readonly fs [ 250.632890][ T5160] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 250.640271][ T5160] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 251.299086][ T5166] loop0: detected capacity change from 0 to 512 [ 251.834701][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 252.071852][ T5170] ipt_CLUSTERIP: Please specify destination IP [ 254.100147][ T5166] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.121216][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 254.209675][ T5166] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 254.289876][ T5175] loop1: detected capacity change from 0 to 1024 [ 254.332045][ T5175] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 254.357291][ T5166] EXT4-fs: failed to create workqueue [ 254.381975][ T5175] EXT4-fs (loop1): invalid journal inode [ 254.391454][ T5175] EXT4-fs (loop1): can't get journal size [ 254.414195][ T5175] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 254.506421][ T5166] EXT4-fs (loop0): mount failed [ 254.861222][ T5181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 257.042434][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 257.353351][ T5190] loop2: detected capacity change from 0 to 256 [ 257.449176][ T5191] loop3: detected capacity change from 0 to 512 [ 257.456385][ T5191] EXT4-fs: Ignoring removed nobh option [ 257.463692][ T5191] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.483214][ T5191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 257.492638][ T5191] EXT4-fs (loop3): orphan cleanup on readonly fs [ 257.500249][ T5191] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 257.516127][ T5191] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 257.524323][ T5191] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 257.546012][ T5191] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.191: couldn't read orphan inode 13 (err -117) [ 257.561414][ T5191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 257.655470][ T5190] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 259.707010][ T5204] 9pnet_fd: Insufficient options for proto=fd [ 261.282106][ T5204] loop0: detected capacity change from 0 to 40427 [ 261.295332][ T5204] F2FS-fs (loop0): Wrong CP boundary, start(512) end(516) blocks(1024) [ 261.304795][ T5204] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 261.342121][ T5204] F2FS-fs (loop0): invalid crc value [ 261.409698][ T5204] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 261.604300][ T5204] F2FS-fs (loop0): recover fsync data on readonly fs [ 261.615458][ T5204] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 261.623382][ T5204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 262.897918][ T5212] loop1: detected capacity change from 0 to 16 [ 262.919605][ T5212] erofs: (device loop1): mounted with root inode @ nid 36. [ 266.496682][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.506813][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.514713][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.530028][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.547459][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 266.563572][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.858196][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.864599][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.800091][ T4261] syz-executor (4261) used greatest stack depth: 19768 bytes left [ 270.406514][ T5246] 9pnet_fd: Insufficient options for proto=fd [ 270.930183][ T5248] loop2: detected capacity change from 0 to 40427 [ 270.959049][ T5248] F2FS-fs (loop2): Wrong CP boundary, start(512) end(516) blocks(1024) [ 270.967441][ T5248] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 270.988282][ T5248] F2FS-fs (loop2): invalid crc value [ 271.159083][ T5248] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 271.396271][ T5248] F2FS-fs (loop2): recover fsync data on readonly fs [ 271.404987][ T5248] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 271.412479][ T5248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 271.588353][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 272.271464][ T5207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.327750][ T5252] loop1: detected capacity change from 0 to 256 [ 272.462924][ T5252] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 272.624112][ T5207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.758389][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 274.277260][ T5186] EXT4-fs (loop3): unmounting filesystem. [ 274.758085][ T5207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.325298][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 276.733926][ T5207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.769169][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.778760][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.789809][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.798760][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.808027][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.815492][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.958508][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 278.094567][ T5282] loop0: detected capacity change from 0 to 1024 [ 278.316266][ T5282] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 278.376325][ T5282] EXT4-fs (loop0): invalid journal inode [ 278.382098][ T5282] EXT4-fs (loop0): can't get journal size [ 278.425305][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 278.634738][ T5282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 278.655166][ T5287] xt_CT: No such helper "snmp_trap" [ 279.625985][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 280.077313][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.116969][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.242733][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 281.318081][ T5228] device bridge_slave_0 entered promiscuous mode [ 281.341058][ T5309] loop0: detected capacity change from 0 to 1024 [ 281.351876][ T5309] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 281.396790][ T5309] EXT4-fs (loop0): invalid journal inode [ 281.402699][ T5309] EXT4-fs (loop0): can't get journal size [ 281.531962][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 282.086487][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 282.109248][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.118085][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.132658][ T5228] device bridge_slave_1 entered promiscuous mode [ 282.801064][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 283.083428][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.451287][ T5328] 9pnet_fd: Insufficient options for proto=fd [ 284.159809][ T5327] xt_CT: No such helper "snmp_trap" [ 284.600789][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 285.075976][ T5329] loop0: detected capacity change from 0 to 40427 [ 285.110991][ T5329] F2FS-fs (loop0): Wrong CP boundary, start(512) end(516) blocks(1024) [ 285.119519][ T5329] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 285.142351][ T5329] F2FS-fs (loop0): invalid crc value [ 285.241170][ T5329] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 285.468304][ T5329] F2FS-fs (loop0): recover fsync data on readonly fs [ 285.484202][ T5329] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 285.491698][ T5329] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 286.100921][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.418343][ T5334] xt_TCPMSS: Only works on TCP SYN packets [ 286.616068][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 287.116661][ T5228] team0: Port device team_slave_0 added [ 287.188171][ T5228] team0: Port device team_slave_1 added [ 288.117204][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.124232][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.196313][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.299636][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.326642][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.543640][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.612720][ T5346] loop1: detected capacity change from 0 to 32768 [ 288.652368][ T5346] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.223 (5346) [ 288.798006][ T5276] chnl_net:caif_netlink_parms(): no params data found [ 290.334419][ T5346] BTRFS error (device loop1): open_ctree failed: -4 [ 291.043919][ T5228] device hsr_slave_0 entered promiscuous mode [ 291.059021][ T5228] device hsr_slave_1 entered promiscuous mode [ 291.073024][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.805613][ T5228] Cannot create hsr debugfs directory [ 291.893753][ T5388] loop1: detected capacity change from 0 to 64 [ 291.937212][ T5386] loop2: detected capacity change from 0 to 2048 [ 291.983779][ T4494] udevd[4494]: incorrect nilfs2 checksum on /dev/loop2 [ 292.016200][ T5386] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.256928][ T5393] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.500237][ T5404] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 292.555266][ T5404] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 292.607715][ T5404] Remounting filesystem read-only [ 292.613807][ T5404] NILFS (loop2): error -5 truncating bmap (ino=15) [ 292.717231][ T5386] syz.2.229 (5386) used greatest stack depth: 18800 bytes left [ 292.900827][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.939340][ T5276] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.961179][ T4252] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 293.025191][ T5276] device bridge_slave_0 entered promiscuous mode [ 293.191693][ T5207] device hsr_slave_0 left promiscuous mode [ 293.198955][ T5207] device hsr_slave_1 left promiscuous mode [ 293.206900][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.214505][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.397206][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.482215][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.580419][ T5207] device bridge_slave_1 left promiscuous mode [ 293.643788][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.864954][ T5207] device bridge_slave_0 left promiscuous mode [ 293.893851][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.048360][ T5207] device veth1_macvtap left promiscuous mode [ 294.055093][ T5207] device veth0_macvtap left promiscuous mode [ 294.062329][ T5207] device veth1_vlan left promiscuous mode [ 294.069241][ T5207] device veth0_vlan left promiscuous mode [ 294.088826][ T5412] loop2: detected capacity change from 0 to 4096 [ 295.482497][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 295.701866][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 295.724043][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.735263][ T126] usb 1-1: config 0 has no interfaces? [ 295.767395][ T126] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 295.789626][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.797930][ T126] usb 1-1: Product: syz [ 295.802366][ T126] usb 1-1: Manufacturer: syz [ 295.807126][ T126] usb 1-1: SerialNumber: syz [ 295.834056][ T126] usb 1-1: config 0 descriptor?? [ 295.885104][ T5424] loop2: detected capacity change from 0 to 32768 [ 295.909513][ T5424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.236 (5424) [ 295.961158][ T5424] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.975082][ T5424] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 296.003503][ T5424] BTRFS info (device loop2): setting nodatacow, compression disabled [ 296.025697][ T5424] BTRFS info (device loop2): setting datacow [ 296.041514][ T5424] BTRFS info (device loop2): doing ref verification [ 296.048593][ T5424] BTRFS info (device loop2): force clearing of disk cache [ 296.055768][ T5424] BTRFS info (device loop2): turning off barriers [ 296.070456][ T5420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.072062][ T5424] BTRFS info (device loop2): enabling ssd optimizations [ 296.099550][ T5424] BTRFS info (device loop2): using spread ssd allocation scheme [ 296.102579][ T5420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.108439][ T5424] BTRFS info (device loop2): using free space tree [ 296.142518][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 296.530367][ T1043] block nbd0: Attempted send on invalid socket [ 296.546140][ T5441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.569455][ T1043] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.586999][ T5435] vxfs: unable to read disk superblock at 1 [ 296.635887][ T1043] block nbd0: Attempted send on invalid socket [ 296.644496][ T1043] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.671019][ T5441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.675989][ T5435] vxfs: unable to read disk superblock at 8 [ 296.746043][ T5441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.755528][ T5435] vxfs: can't find superblock. [ 296.768388][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 296.805883][ T5441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.995987][ T5424] BTRFS info (device loop2): rebuilding free space tree [ 297.088911][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.210298][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.212089][ T4299] usb 1-1: USB disconnect, device number 2 [ 297.729323][ T4252] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.444370][ T5207] bond0 (unregistering): Released all slaves [ 298.616892][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.624554][ T5276] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.635574][ T5276] device bridge_slave_1 entered promiscuous mode [ 298.674117][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 298.750595][ T5468] device syz_tun entered promiscuous mode [ 298.984297][ T5276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.058753][ T5472] loop1: detected capacity change from 0 to 64 [ 299.101447][ T5276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.324885][ T5276] team0: Port device team_slave_0 added [ 299.352786][ T5276] team0: Port device team_slave_1 added [ 299.501156][ T5479] loop2: detected capacity change from 0 to 4096 [ 299.611884][ T5479] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 299.620174][ T5479] UDF-fs: Scanning with blocksize 512 failed [ 299.632605][ T5479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.490449][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.518077][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.608190][ T5276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.703193][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.730382][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.757420][ T5495] loop2: detected capacity change from 0 to 1024 [ 300.810359][ T5276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.822476][ T5495] hfsplus: unable to parse mount options [ 300.971463][ T5495] loop2: detected capacity change from 0 to 128 [ 301.004053][ T5276] device hsr_slave_0 entered promiscuous mode [ 301.051887][ T5495] EXT4-fs (loop2): Test dummy encryption mode enabled [ 301.062366][ T5276] device hsr_slave_1 entered promiscuous mode [ 301.082961][ T5228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.086783][ T5495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 301.114373][ T5495] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.155948][ T5228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.251616][ T5228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.292559][ T5228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.199886][ T5207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.396540][ T5207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.446328][ T5511] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 302.485157][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 302.540214][ T5207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.629077][ T5207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.812111][ T5276] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.831161][ T5276] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.863788][ T951] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 302.898985][ T5276] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.986346][ T5529] cifs: Unknown parameter 'mode' [ 303.140306][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.673568][ T5276] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.869714][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.893524][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 303.893913][ T951] usb 3-1: device descriptor read/64, error -71 [ 303.929917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.958556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.594156][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.662928][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.710922][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.718113][ T4615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.836790][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.873251][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.898645][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.905897][ T4615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.916510][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.051127][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.440845][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.553869][ T5228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.600474][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.656626][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.680522][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.697658][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.712950][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.723042][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.741760][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.769512][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.858961][ T5558] loop2: detected capacity change from 0 to 64 [ 305.909473][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.129648][ T5562] Trying to free block not in datazone [ 307.138821][ T5562] Trying to free block not in datazone [ 307.144342][ T5562] Trying to free block not in datazone [ 307.154918][ T5562] Trying to free block not in datazone [ 307.866592][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.893989][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.100003][ T5276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.229667][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.241010][ T5577] loop0: detected capacity change from 0 to 2048 [ 308.279260][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.316707][ T5577] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 308.331682][ T5276] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.475644][ T4494] udevd[4494]: incorrect nilfs2 checksum on /dev/loop0 [ 308.484323][ T5586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.605671][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.629437][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.643710][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.650946][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.666105][ T5589] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952 [ 308.748831][ T5589] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 308.907917][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.925353][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.964825][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.969620][ T5589] Remounting filesystem read-only [ 308.979954][ T5589] NILFS (loop0): error -5 truncating bmap (ino=15) [ 309.076653][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.083867][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.092020][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.153965][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.206779][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.254212][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.286530][ T4251] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 309.303665][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.315771][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.344624][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.386193][ T5595] loop2: detected capacity change from 0 to 64 [ 309.435272][ T5597] loop0: detected capacity change from 0 to 1024 [ 309.467151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.484806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.503547][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.520974][ T5600] loop1: detected capacity change from 0 to 256 [ 309.528138][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.549447][ T5276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.563665][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.587348][ T5597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.631460][ T5600] FAT-fs (loop1): Directory bread(block 64) failed [ 309.639421][ T5600] FAT-fs (loop1): Directory bread(block 65) failed [ 309.648597][ T5600] FAT-fs (loop1): Directory bread(block 66) failed [ 309.655309][ T5600] FAT-fs (loop1): Directory bread(block 67) failed [ 309.662457][ T5600] FAT-fs (loop1): Directory bread(block 68) failed [ 309.669382][ T5600] FAT-fs (loop1): Directory bread(block 69) failed [ 309.676154][ T5600] FAT-fs (loop1): Directory bread(block 70) failed [ 309.684574][ T5600] FAT-fs (loop1): Directory bread(block 71) failed [ 309.691429][ T5600] FAT-fs (loop1): Directory bread(block 72) failed [ 309.698293][ T5600] FAT-fs (loop1): Directory bread(block 73) failed [ 309.701065][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.802929][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.823612][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 309.842635][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.250126][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 313.802220][ T5645] loop1: detected capacity change from 0 to 64 [ 313.890581][ T5276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.966508][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.974151][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.120491][ T5207] device hsr_slave_0 left promiscuous mode [ 314.138941][ T5207] device hsr_slave_1 left promiscuous mode [ 314.176235][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.183840][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.193490][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 314.235031][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.270196][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.292482][ T5207] device bridge_slave_1 left promiscuous mode [ 314.328053][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.393864][ T5207] device bridge_slave_0 left promiscuous mode [ 314.435291][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.522033][ T5661] loop0: detected capacity change from 0 to 32768 [ 314.623305][ T5661] XFS (loop0): Mounting V5 Filesystem [ 314.635943][ T5207] device veth1_macvtap left promiscuous mode [ 314.642152][ T5207] device veth0_macvtap left promiscuous mode [ 314.648722][ T5207] device veth1_vlan left promiscuous mode [ 314.655010][ T5207] device veth0_vlan left promiscuous mode [ 314.737499][ T5661] XFS (loop0): Ending clean mount [ 315.962114][ T5665] loop1: detected capacity change from 0 to 32768 [ 316.017321][ T5665] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 316.030117][ T5665] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 316.075234][ T5665] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 316.157494][ T4251] XFS (loop0): Unmounting Filesystem [ 316.185629][ T5665] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 316.682942][ T5678] loop1: detected capacity change from 0 to 256 [ 317.189237][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 317.297540][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 317.393284][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.063483][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.105922][ T5693] Bluetooth: MGMT ver 1.22 [ 322.170737][ T4265] Bluetooth: hci0: command 0x0c20 tx timeout [ 322.270512][ T5701] tty tty4: ldisc open failed (-12), clearing slot 3 [ 323.263313][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.273664][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.283069][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.292742][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.300530][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 323.308573][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.594713][ T5207] bond0 (unregistering): Released all slaves [ 325.040799][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 325.336036][ T4265] Bluetooth: hci5: command 0x0409 tx timeout [ 326.371232][ T5720] loop1: detected capacity change from 0 to 32768 [ 326.409387][ T5720] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 326.440451][ T5720] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 326.508776][ T5720] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 326.628834][ T5720] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 327.426188][ T4265] Bluetooth: hci5: command 0x041b tx timeout [ 328.299350][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.316791][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.691375][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.715792][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.805529][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.823169][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.855573][ T5276] device veth0_vlan entered promiscuous mode [ 328.890678][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.910168][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.933367][ T5708] chnl_net:caif_netlink_parms(): no params data found [ 328.952336][ T5276] device veth1_vlan entered promiscuous mode [ 328.993573][ T5740] loop2: detected capacity change from 0 to 32768 [ 329.055099][ T5740] (syz.2.307,5740,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 329.102258][ T5740] (syz.2.307,5740,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 329.133621][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.155171][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.497408][ T4265] Bluetooth: hci5: command 0x040f tx timeout [ 329.560195][ T5740] JBD2: Ignoring recovery information on journal [ 329.714266][ T5276] device veth0_macvtap entered promiscuous mode [ 330.101710][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.181711][ T5276] device veth1_macvtap entered promiscuous mode [ 330.469393][ T5740] JBD2: recovery failed [ 330.509423][ T5740] (syz.2.307,5740,0):ocfs2_journal_load:1112 ERROR: Failed to load journal! [ 330.623861][ T5740] (syz.2.307,5740,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -5 [ 330.730819][ T5740] (syz.2.307,5740,0):ocfs2_check_volume:2486 ERROR: status = -5 [ 330.785974][ T5740] (syz.2.307,5740,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 330.845981][ T5740] (syz.2.307,5740,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 330.937497][ T5708] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.944787][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.954269][ T5708] device bridge_slave_0 entered promiscuous mode [ 330.964285][ T5708] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.971919][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.005236][ T5708] device bridge_slave_1 entered promiscuous mode [ 331.576118][ T4265] Bluetooth: hci5: command 0x0419 tx timeout [ 333.246030][ T5796] netlink: 'syz.0.316': attribute type 2 has an invalid length. [ 333.253698][ T5796] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 333.261376][ T5796] netlink: 46603 bytes leftover after parsing attributes in process `syz.0.316'. [ 333.308585][ T5708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.436904][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 333.473072][ T5708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.961637][ T5708] team0: Port device team_slave_0 added [ 333.976220][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 334.001311][ T5708] team0: Port device team_slave_1 added [ 334.429689][ T4255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.475049][ T4255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.493800][ T4255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.396614][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.404273][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.411923][ T4255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.545543][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.559696][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.728894][ T5708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.797471][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.804556][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.150427][ T5708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.540405][ T5824] loop1: detected capacity change from 0 to 131072 [ 336.580592][ T5824] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 336.590384][ T1043] block nbd2: Attempted send on invalid socket [ 336.596802][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 336.630069][ T5824] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 336.716045][ T5834] SQUASHFS error: Failed to read block 0x0: -5 [ 336.722448][ T5834] unable to read squashfs_super_block [ 337.034834][ T5824] F2FS-fs (loop1): invalid crc value [ 337.163974][ T5824] F2FS-fs (loop1): Found nat_bits in checkpoint [ 337.215671][ T5824] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 337.222890][ T5824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 337.401931][ T5841] loop2: detected capacity change from 0 to 256 [ 337.426379][ T5841] exfat: Deprecated parameter 'namecase' [ 337.497110][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 337.507938][ T5841] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 337.534746][ T5708] device hsr_slave_0 entered promiscuous mode [ 337.607808][ T5708] device hsr_slave_1 entered promiscuous mode [ 337.635069][ T5708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.657411][ T5708] Cannot create hsr debugfs directory [ 337.898039][ T5844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 337.940821][ T5832] loop0: detected capacity change from 0 to 32768 [ 337.957635][ T5832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.327 (5832) [ 337.998058][ T5832] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.109977][ T5832] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 338.127978][ T5832] BTRFS info (device loop0): setting nodatacow, compression disabled [ 338.168123][ T5832] BTRFS info (device loop0): max_inline at 0 [ 338.174193][ T5832] BTRFS info (device loop0): enabling disk space caching [ 338.246058][ T5832] BTRFS info (device loop0): turning off barriers [ 338.253392][ T5832] BTRFS info (device loop0): turning on flush-on-commit [ 338.306194][ T5832] BTRFS info (device loop0): doing ref verification [ 338.312865][ T5832] BTRFS info (device loop0): force clearing of disk cache [ 338.344507][ T5832] BTRFS info (device loop0): enabling ssd optimizations [ 338.378722][ T5832] BTRFS info (device loop0): max_inline at 4096 [ 338.385060][ T5832] BTRFS info (device loop0): disk space caching is enabled [ 338.908271][ T5832] BTRFS info (device loop0): rebuilding free space tree [ 338.984486][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 338.987344][ T5832] BTRFS info (device loop0): disabling free space tree [ 339.046260][ T5832] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 339.060048][ T5832] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 339.208636][ T4251] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.576133][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 339.759254][ T5896] loop1: detected capacity change from 0 to 1024 [ 339.770005][ T5896] EXT4-fs: Ignoring removed nobh option [ 339.775710][ T5896] EXT4-fs: Ignoring removed bh option [ 339.792152][ T5896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 339.946611][ T5896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 340.276425][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 340.533513][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.553058][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.575051][ T5814] device bridge_slave_0 entered promiscuous mode [ 340.606514][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.624096][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.643043][ T5814] device bridge_slave_1 entered promiscuous mode [ 340.775180][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.844200][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.972830][ T5814] team0: Port device team_slave_0 added [ 341.011877][ T5814] team0: Port device team_slave_1 added [ 341.140664][ T5901] loop2: detected capacity change from 0 to 131072 [ 341.148539][ T5901] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 341.156740][ T5901] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 341.296240][ T5901] F2FS-fs (loop2): invalid crc value [ 341.357947][ T5901] F2FS-fs (loop2): Found nat_bits in checkpoint [ 341.425233][ T5901] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 341.434381][ T5901] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 341.476673][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.516212][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.598121][ T27] audit: type=1800 audit(1743987791.578:3): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.338" name="file2" dev="loop2" ino=8 res=0 errno=0 [ 341.607222][ T5924] loop1: detected capacity change from 0 to 2048 [ 341.635579][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.656164][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 341.706285][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.728967][ T5924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 341.771087][ T5924] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.786716][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.812676][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.819146][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.841379][ T27] audit: type=1800 audit(1743987791.818:4): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.339" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 342.047216][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 342.275308][ T5814] device hsr_slave_0 entered promiscuous mode [ 342.282692][ T5814] device hsr_slave_1 entered promiscuous mode [ 342.316005][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.323639][ T5814] Cannot create hsr debugfs directory [ 342.457604][ T5207] device hsr_slave_0 left promiscuous mode [ 342.470048][ T5207] device hsr_slave_1 left promiscuous mode [ 342.514118][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.531152][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.549184][ T5207] device bridge_slave_1 left promiscuous mode [ 342.563035][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.598411][ T5207] device bridge_slave_0 left promiscuous mode [ 342.622947][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.698516][ T5940] loop1: detected capacity change from 0 to 32768 [ 342.775284][ T5940] XFS (loop1): Mounting V5 Filesystem [ 342.833981][ T5940] XFS (loop1): Ending clean mount [ 343.836399][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 344.092026][ T4254] XFS (loop1): Unmounting Filesystem [ 344.243042][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 344.311605][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 344.380081][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.464651][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.838213][ T5207] bond0 (unregistering): Released all slaves [ 346.092401][ T5708] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 346.135248][ T5708] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 346.259844][ T5977] loop0: detected capacity change from 0 to 64 [ 346.454858][ T5982] Trying to free block not in datazone [ 346.463519][ T5982] Trying to free block not in datazone [ 346.469286][ T5982] Trying to free block not in datazone [ 346.489131][ T5982] Trying to free block not in datazone [ 346.542586][ T5708] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 346.851553][ T5708] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.338755][ T5988] loop0: detected capacity change from 0 to 1024 [ 347.519563][ T5988] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 347.699119][ T5984] loop2: detected capacity change from 0 to 131072 [ 347.737217][ T5984] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 347.745363][ T5984] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 347.755385][ T5984] F2FS-fs (loop2): invalid crc value [ 347.774939][ T5708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.803760][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 347.931420][ T5984] F2FS-fs (loop2): Found nat_bits in checkpoint [ 348.757290][ T5984] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 348.764419][ T5984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 348.913837][ T5708] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.004769][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.105423][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.592150][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.680249][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.766833][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.774105][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.866348][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.896413][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.905277][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.956436][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.963586][ T4615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.033998][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.085745][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.145048][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.182519][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.227442][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.275086][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.297872][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.343342][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.368838][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.410512][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.446603][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.457555][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.768848][ T5814] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.853628][ T6009] loop0: detected capacity change from 0 to 40427 [ 350.871840][ T5814] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.896337][ T6009] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 350.909090][ T5814] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.926839][ T6009] F2FS-fs (loop0): invalid crc value [ 350.970985][ T6009] F2FS-fs (loop0): Found nat_bits in checkpoint [ 351.027369][ T5814] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.124448][ T6009] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 351.313537][ T27] audit: type=1800 audit(1743987801.288:5): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.356" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 351.364549][ T6009] syz.0.356: attempt to access beyond end of device [ 351.364549][ T6009] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 351.540159][ T4251] syz-executor: attempt to access beyond end of device [ 351.540159][ T4251] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 351.566659][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.586034][ T5708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.593842][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.620460][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.727272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.762357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.816074][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.847186][ T6049] loop2: detected capacity change from 0 to 1024 [ 352.023409][ T6049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 352.131392][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.157488][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.186964][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.194177][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.208958][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.223043][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.234617][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.236565][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 352.241871][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.257514][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.331954][ T5207] device hsr_slave_0 left promiscuous mode [ 352.377006][ T5207] device hsr_slave_1 left promiscuous mode [ 352.409949][ T6062] loop1: detected capacity change from 0 to 64 [ 352.426508][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.460630][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.489886][ T6060] loop2: detected capacity change from 0 to 2048 [ 352.508113][ T5207] device bridge_slave_1 left promiscuous mode [ 352.514404][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.527792][ T6060] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 352.566043][ T4494] udevd[4494]: incorrect nilfs2 checksum on /dev/loop2 [ 352.579963][ T5207] device bridge_slave_0 left promiscuous mode [ 352.612234][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.621629][ T6067] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.677583][ T6069] loop6: detected capacity change from 0 to 524287999 [ 352.769673][ T4615] loop: Write error at byte offset 1, length 4096. [ 352.778985][ T4615] loop: Write error at byte offset 1, length 4096. [ 352.787216][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 2 [ 352.797050][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 352.805492][ C0] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 352.807017][ T5207] device veth1_macvtap left promiscuous mode [ 352.835135][ T5207] device veth0_macvtap left promiscuous mode [ 352.877943][ T5207] device veth1_vlan left promiscuous mode [ 352.896428][ T5207] device veth0_vlan left promiscuous mode [ 353.349880][ T6076] loop2: detected capacity change from 0 to 32768 [ 353.497864][ T6076] XFS (loop2): Mounting V5 Filesystem [ 353.833535][ T6076] XFS (loop2): Ending clean mount [ 354.836917][ T6090] block device autoloading is deprecated and will be removed. [ 354.864486][ T4252] XFS (loop2): Unmounting Filesystem [ 355.813062][ T6098] loop1: detected capacity change from 0 to 1024 [ 355.887783][ T6098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 356.027740][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 356.130361][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 356.166811][ T6105] loop1: detected capacity change from 0 to 2048 [ 356.190930][ T6105] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 356.214174][ T4494] udevd[4494]: incorrect nilfs2 checksum on /dev/loop1 [ 356.236711][ T6106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.255356][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 356.366422][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.431833][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.630685][ T6111] netlink: 'syz.1.379': attribute type 2 has an invalid length. [ 357.215059][ T6113] loop2: detected capacity change from 0 to 2048 [ 357.240748][ T6113] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 357.308559][ T6114] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.352234][ T6113] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 357.366089][ T6113] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 357.383385][ T6113] Remounting filesystem read-only [ 357.389146][ T6113] NILFS (loop2): error -5 truncating bmap (ino=15) [ 357.500512][ T6118] loop1: detected capacity change from 0 to 8 [ 357.707259][ T4252] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 357.934060][ T27] audit: type=1800 audit(1743987807.838:6): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.381" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 358.780323][ T6121] loop2: detected capacity change from 0 to 32768 [ 358.813104][ T6121] XFS (loop2): Mounting V5 Filesystem [ 358.914539][ T6121] XFS (loop2): Ending clean mount [ 360.149435][ T6140] loop1: detected capacity change from 0 to 1024 [ 360.195476][ T4252] XFS (loop2): Unmounting Filesystem [ 360.238920][ T5207] bond0 (unregistering): Released all slaves [ 360.253628][ T6140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 360.390809][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 360.400125][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.439934][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 360.493112][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.524827][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.606917][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.657722][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.677366][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.693223][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.717461][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.741448][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.787236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.798518][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.851178][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.912930][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.931609][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.061449][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.168620][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.509573][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.477999][ T5708] device veth0_vlan entered promiscuous mode [ 362.537269][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.547676][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.654837][ T5708] device veth1_vlan entered promiscuous mode [ 363.889310][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.917628][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.065908][ T5708] device veth0_macvtap entered promiscuous mode [ 364.537036][ T5708] device veth1_macvtap entered promiscuous mode [ 364.582341][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.593185][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.604060][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.621538][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.642299][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.654039][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.708901][ T6177] loop1: detected capacity change from 0 to 128 [ 364.739980][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.756752][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.773345][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.840390][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.905061][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.953213][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.975444][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.082299][ T4494] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.520595][ T6183] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 367.501054][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.636193][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.676380][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.898770][ T6190] loop0: detected capacity change from 0 to 2048 [ 367.962678][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.971916][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.981563][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.002164][ T5708] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.181637][ T5708] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.195012][ T5708] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.207609][ T5708] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.496874][ T6190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 368.770856][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.818581][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.830409][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.861666][ T6205] loop2: detected capacity change from 0 to 64 [ 369.002817][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 369.120841][ T5330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.156306][ T5330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.196255][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.210684][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 369.275571][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.308817][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.138255][ T6238] loop2: detected capacity change from 0 to 8 [ 373.328906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.388037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.779770][ T6252] input: syz0 as /devices/virtual/input/input5 [ 373.827370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.837792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.877775][ T5814] device veth0_vlan entered promiscuous mode [ 373.898075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.923700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.959061][ T5814] device veth1_vlan entered promiscuous mode [ 374.012958][ T6255] loop5: detected capacity change from 0 to 2048 [ 374.052145][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 374.076751][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 374.087043][ T6255] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 374.100158][ T4494] udevd[4494]: incorrect nilfs2 checksum on /dev/loop5 [ 374.128566][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.160634][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.174561][ T6263] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.175712][ T6259] loop2: detected capacity change from 0 to 2048 [ 374.221459][ T5814] device veth0_macvtap entered promiscuous mode [ 374.227316][ T6255] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 3044605952 [ 374.262388][ T6255] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 374.262982][ T5814] device veth1_macvtap entered promiscuous mode [ 374.314699][ T6255] Remounting filesystem read-only [ 374.333459][ T6255] NILFS (loop5): error -5 truncating bmap (ino=15) [ 374.340552][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.359507][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.361691][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 374.452956][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.521897][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.556102][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.568356][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.578731][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.605871][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.623738][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.649318][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.670834][ T5708] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 374.715949][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.754077][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.803887][ T6272] loop1: detected capacity change from 0 to 4096 [ 374.826939][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 374.859064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.968749][ T6277] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.103522][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.540024][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.554616][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.566903][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.644207][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.742468][ T6284] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 375.763267][ T6284] Remounting filesystem read-only [ 375.775497][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.802761][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.881964][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.132149][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.216587][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.309950][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.498821][ T5814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.637139][ T5814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.722494][ T5814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.732151][ T5814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.739437][ T6295] netlink: 68 bytes leftover after parsing attributes in process `syz.1.415'. [ 376.838243][ T6298] loop0: detected capacity change from 0 to 8 [ 378.683815][ T6310] loop2: detected capacity change from 0 to 8 [ 379.100662][ T27] audit: type=1800 audit(1743987829.058:7): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.418" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 379.489999][ T6317] loop0: detected capacity change from 0 to 1024 [ 380.109539][ T5330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.143691][ T5330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.158025][ T27] audit: type=1800 audit(1743987830.138:8): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="bus" dev="loop0" ino=25 res=0 errno=0 [ 380.209131][ T27] audit: type=1800 audit(1743987830.188:9): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="bus" dev="loop0" ino=25 res=0 errno=0 [ 380.311364][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.327176][ T6317] syz.0.421: attempt to access beyond end of device [ 380.327176][ T6317] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 380.341749][ T6317] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 380.352281][ T6317] syz.0.421: attempt to access beyond end of device [ 380.352281][ T6317] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 380.357485][ T6327] input: syz0 as /devices/virtual/input/input6 [ 380.366591][ T6317] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 380.868036][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.876437][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.896338][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.780605][ T6335] loop6: detected capacity change from 0 to 40427 [ 382.819488][ T6335] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 382.829428][ T6335] F2FS-fs (loop6): invalid crc value [ 382.890182][ T6335] F2FS-fs (loop6): Found nat_bits in checkpoint [ 382.956163][ T6335] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 383.118736][ T6349] F2FS-fs (loop6) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 383.537085][ T5814] syz-executor: attempt to access beyond end of device [ 383.537085][ T5814] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.584222][ T6350] loop2: detected capacity change from 0 to 2048 [ 384.103979][ T6350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 384.193191][ T6350] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.659880][ T6350] fs-verity: sha512 using implementation "sha512-avx2" [ 385.169309][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 388.325297][ T6385] loop5: detected capacity change from 0 to 1024 [ 389.564851][ T6385] hfsplus: failed to load root directory [ 389.744321][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.750952][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.443455][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.085406][ T6406] loop1: detected capacity change from 0 to 8 [ 391.244325][ T4300] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 391.273284][ T27] audit: type=1800 audit(1743987841.248:10): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.442" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 391.298439][ T4300] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 391.365761][ T6417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.361361][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 392.556111][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 392.589337][ T7] usb 7-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 392.651749][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.676150][ T7] usb 7-1: Product: syz [ 392.702685][ T7] usb 7-1: Manufacturer: syz [ 392.722869][ T7] usb 7-1: SerialNumber: syz [ 392.815421][ T7] usb 7-1: config 0 descriptor?? [ 392.864373][ T7] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 393.466673][ T7] gspca_sunplus: reg_w_riv err -110 [ 393.472408][ T7] sunplus: probe of 7-1:0.0 failed with error -110 [ 393.974670][ T7] usb 7-1: USB disconnect, device number 2 [ 394.769614][ T6469] loop5: detected capacity change from 0 to 256 [ 394.792407][ T6468] loop6: detected capacity change from 0 to 1024 [ 394.832179][ T6469] exfat: Unknown parameter 'devices.list' [ 395.097427][ T27] audit: type=1800 audit(1743987845.078:11): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.456" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 395.706085][ T27] audit: type=1800 audit(1743987845.498:12): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.456" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 399.268959][ T6509] loop0: detected capacity change from 0 to 1024 [ 399.387882][ T6509] hfsplus: unable to parse mount options [ 399.494256][ T6509] loop0: detected capacity change from 0 to 128 [ 399.523632][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.469'. [ 399.586270][ T6509] EXT4-fs (loop0): Test dummy encryption mode enabled [ 399.666395][ T6509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 399.688967][ T6509] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 399.757586][ T6520] loop1: detected capacity change from 0 to 2048 [ 399.910238][ T6520] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 402.627838][ T4494] udevd[4494]: incorrect nilfs2 checksum on /dev/loop1 [ 402.669462][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 402.788991][ T6520] NILFS (loop1): error -4 creating segctord thread [ 406.714936][ T6569] loop2: detected capacity change from 0 to 64 [ 406.801056][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 407.170602][ T6577] Zero length message leads to an empty skb [ 407.180102][ T6577] loop6: detected capacity change from 0 to 8 [ 408.617979][ T6579] loop1: detected capacity change from 0 to 1024 [ 408.657254][ T6579] hfsplus: unable to parse mount options [ 408.852229][ T4331] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.860171][ T6583] loop5: detected capacity change from 0 to 1024 [ 408.878530][ T6579] loop1: detected capacity change from 0 to 128 [ 409.358136][ T6579] EXT4-fs (loop1): Test dummy encryption mode enabled [ 409.961263][ T6579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 409.966998][ T6583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 409.980656][ T6579] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.881612][ T5708] EXT4-fs (loop5): unmounting filesystem. [ 411.940863][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 412.129307][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.494'. [ 413.230351][ T6626] loop5: detected capacity change from 0 to 64 [ 413.688367][ T6629] loop1: detected capacity change from 0 to 32768 [ 414.036364][ T6629] XFS (loop1): Mounting V5 Filesystem [ 414.313926][ T6629] XFS (loop1): Ending clean mount [ 414.336969][ T6645] loop5: detected capacity change from 0 to 8 [ 415.765011][ T27] audit: type=1800 audit(1743987865.738:13): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.499" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 415.962885][ T4254] XFS (loop1): Unmounting Filesystem [ 416.064275][ T6658] loop5: detected capacity change from 0 to 1024 [ 416.116776][ T6658] hfsplus: unable to parse mount options [ 416.158937][ T6658] loop5: detected capacity change from 0 to 128 [ 416.166237][ T4666] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.178890][ T6658] EXT4-fs (loop5): Test dummy encryption mode enabled [ 416.310510][ T6658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 416.340285][ T6658] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 416.359042][ T4666] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.377927][ T4666] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 416.388329][ T4666] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.397751][ T4666] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.412354][ T6655] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 417.594612][ T4666] usb 7-1: USB disconnect, device number 3 [ 417.862721][ T6673] loop1: detected capacity change from 0 to 64 [ 417.895925][ T5459] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 418.000544][ T6674] Trying to free block not in datazone [ 418.011345][ T6674] Trying to free block not in datazone [ 418.017029][ T6674] Trying to free block not in datazone [ 418.043353][ T4488] udevd[4488]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.044859][ T6674] Trying to free block not in datazone [ 418.136056][ T5459] usb 6-1: device descriptor read/64, error -71 [ 418.406054][ T5459] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 418.586155][ T5459] usb 6-1: device descriptor read/64, error -71 [ 418.673488][ T6683] loop1: detected capacity change from 0 to 256 [ 418.708747][ T6683] exfat: Deprecated parameter 'namecase' [ 418.745905][ T5459] usb usb6-port1: attempt power cycle [ 418.761350][ T6683] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 419.860374][ T5708] EXT4-fs (loop5): unmounting filesystem. [ 420.037672][ T6694] loop6: detected capacity change from 0 to 256 [ 420.044819][ T6694] exfat: Unknown parameter 'devices.list' [ 420.048308][ T6696] loop2: detected capacity change from 0 to 64 [ 421.765305][ T6710] loop5: detected capacity change from 0 to 8 [ 422.109003][ T6715] loop6: detected capacity change from 0 to 32768 [ 423.872530][ T6715] XFS (loop6): Mounting V5 Filesystem [ 424.050115][ T6715] XFS (loop6): Ending clean mount [ 424.936937][ T6739] loop5: detected capacity change from 0 to 1024 [ 424.944289][ T6739] hfsplus: unable to parse mount options [ 425.147169][ T4494] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 425.170061][ T6743] vivid-000: ================= START STATUS ================= [ 425.178787][ T6743] vivid-000: Generate PTS: true [ 425.185585][ T6743] vivid-000: Generate SCR: true [ 425.190836][ T6743] tpg source WxH: 640x360 (Y'CbCr) [ 425.196109][ T6743] tpg field: 1 [ 425.199541][ T6743] tpg crop: 640x360@0x0 [ 425.203728][ T6743] tpg compose: 640x360@0x0 [ 425.208352][ T6743] tpg colorspace: 8 [ 425.212188][ T6743] tpg transfer function: 0/0 [ 425.216914][ T6743] tpg Y'CbCr encoding: 0/0 [ 425.221616][ T6743] tpg quantization: 0/0 [ 425.226072][ T6743] tpg RGB range: 0/2 [ 425.230139][ T6743] vivid-000: ================== END STATUS ================== [ 425.884429][ T6739] loop5: detected capacity change from 0 to 128 [ 426.015378][ T6739] EXT4-fs (loop5): Test dummy encryption mode enabled [ 426.200051][ T5814] XFS (loop6): Unmounting Filesystem [ 426.209368][ T6739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 426.285464][ T6739] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 427.056021][ T5351] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 427.236115][ T5351] usb 6-1: device descriptor read/64, error -71 [ 427.506070][ T5351] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 427.676014][ T5351] usb 6-1: device descriptor read/64, error -71 [ 427.857519][ T5351] usb usb6-port1: attempt power cycle [ 427.874565][ T5708] EXT4-fs (loop5): unmounting filesystem. [ 428.392282][ T6776] loop0: detected capacity change from 0 to 256 [ 429.843383][ T6776] exfat: Unknown parameter 'devices.list' [ 430.237063][ T6786] loop2: detected capacity change from 0 to 64 [ 430.473959][ T6790] loop1: detected capacity change from 0 to 8 [ 431.927036][ T27] audit: type=1800 audit(1743987881.908:14): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.527" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 432.402298][ T6797] loop5: detected capacity change from 0 to 8 [ 433.094372][ T6801] loop1: detected capacity change from 0 to 32768 [ 433.104754][ T6801] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.530 (6801) [ 433.124944][ T6801] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 433.135970][ T6801] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 433.144738][ T6801] BTRFS info (device loop1): turning on async discard [ 433.151644][ T6801] BTRFS info (device loop1): using free space tree [ 433.171458][ T6811] loop5: detected capacity change from 0 to 64 [ 433.348667][ T6826] Trying to free block not in datazone [ 433.356396][ T6826] Trying to free block not in datazone [ 433.361974][ T6826] Trying to free block not in datazone [ 433.396405][ T6826] Trying to free block not in datazone [ 433.734193][ T6801] BTRFS info (device loop1): enabling ssd optimizations [ 433.765448][ T2958] BTRFS warning (device loop1): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0xf773c901 level 0 [ 433.906819][ T6834] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 433.925969][ T6834] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 433.986878][ T6834] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 437.176483][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 437.989106][ T6886] loop2: detected capacity change from 0 to 64 [ 439.660689][ T6897] loop1: detected capacity change from 0 to 8 [ 442.131592][ T6897] SQUASHFS error: Failed to initialise xz decompressor [ 442.138607][ T6897] squashfs image failed sanity check [ 442.636477][ T6899] loop0: detected capacity change from 0 to 8 [ 443.031636][ T6904] loop1: detected capacity change from 0 to 256 [ 443.081153][ T6904] exfat: Unknown parameter 'iochaˆsso8859-9' [ 443.147836][ T4494] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.881758][ T6925] loop6: detected capacity change from 0 to 1024 [ 447.889456][ T6925] hfsplus: unable to parse mount options [ 447.966125][ T4494] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.053358][ T6925] loop6: detected capacity change from 0 to 128 [ 448.081614][ T4494] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 448.135920][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 448.155911][ T4494] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.325517][ T6925] EXT4-fs (loop6): Test dummy encryption mode enabled [ 448.636004][ T6925] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 448.647356][ T6935] loop2: detected capacity change from 0 to 64 [ 448.653991][ T6925] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 448.751132][ T6935] Trying to free block not in datazone [ 448.751719][ T4319] kernel write not supported for file /115/attr/exec (pid: 4319 comm: kworker/0:5) [ 448.770948][ T6935] Trying to free block not in datazone [ 448.777390][ T6935] Trying to free block not in datazone [ 448.961057][ T6935] Trying to free block not in datazone [ 449.766023][ T5459] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 451.095750][ T5814] EXT4-fs (loop6): unmounting filesystem. [ 451.179071][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.185452][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.188944][ T6948] loop5: detected capacity change from 0 to 8 [ 451.591047][ T6962] loop1: detected capacity change from 0 to 64 [ 452.476013][ T951] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 454.976247][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.563'. [ 455.034745][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.563'. [ 455.529444][ T6978] loop1: detected capacity change from 0 to 40427 [ 455.538055][ T6978] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 455.548195][ T6978] F2FS-fs (loop1): invalid crc value [ 455.629565][ T6984] loop5: detected capacity change from 0 to 1024 [ 455.637532][ T6978] F2FS-fs (loop1): Found nat_bits in checkpoint [ 455.691588][ T6989] loop6: detected capacity change from 0 to 64 [ 455.705568][ T6984] hfsplus: unable to parse mount options [ 455.716207][ T6978] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.822682][ T6995] Trying to free block not in datazone [ 455.830226][ T6995] Trying to free block not in datazone [ 455.835857][ T6995] Trying to free block not in datazone [ 455.839395][ T6984] loop5: detected capacity change from 0 to 128 [ 455.846339][ T6995] Trying to free block not in datazone [ 456.290821][ T6984] EXT4-fs (loop5): Test dummy encryption mode enabled [ 456.313036][ T6978] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 456.362497][ T6978] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 456.415646][ T6978] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 456.468103][ T6978] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 456.571811][ T6984] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 456.596017][ T4254] syz-executor: attempt to access beyond end of device [ 456.596017][ T4254] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 456.610667][ T6984] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.377264][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 458.618042][ T4319] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 458.978028][ T4319] usb 6-1: device descriptor read/64, error -71 [ 459.723564][ T4319] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 459.785147][ T5708] EXT4-fs (loop5): unmounting filesystem. [ 459.915876][ T126] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 460.012813][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 460.053211][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 460.106023][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 460.113390][ T126] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 460.152137][ T126] usb 7-1: config 0 has no interface number 0 [ 460.176114][ T126] usb 7-1: config 0 interface 12 has no altsetting 0 [ 460.218116][ T126] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 460.259868][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.296083][ T126] usb 7-1: Product: syz [ 460.483478][ T126] usb 7-1: Manufacturer: syz [ 460.488655][ T126] usb 7-1: SerialNumber: syz [ 460.727900][ T7039] loop0: detected capacity change from 0 to 8 [ 460.754988][ T7032] loop5: detected capacity change from 0 to 32768 [ 460.776975][ T126] usb 7-1: config 0 descriptor?? [ 460.784241][ T126] f81534 7-1:0.12: required endpoints missing [ 460.798457][ T7032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.580 (7032) [ 460.849009][ T7032] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.859470][ T7032] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 460.868409][ T7032] BTRFS info (device loop5): turning on async discard [ 460.875258][ T7032] BTRFS info (device loop5): using free space tree [ 461.112765][ T951] usb 7-1: USB disconnect, device number 5 [ 461.502601][ T7032] BTRFS info (device loop5): enabling ssd optimizations [ 461.518235][ T4375] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0xf773c901 level 0 [ 464.170864][ T7091] loop5: detected capacity change from 0 to 8 [ 466.435588][ T27] audit: type=1800 audit(1743987916.408:15): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.587" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 466.487675][ T7090] SQUASHFS error: Failed to read block 0x2fc: -5 [ 466.494784][ T7090] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 466.502229][ T7090] SQUASHFS error: read_indexes: reading block [2fa:0] [ 466.509853][ T7090] SQUASHFS error: Failed to read block 0xfc: -5 [ 466.519750][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 466.527203][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0] [ 466.534105][ T7090] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 466.542897][ T7090] SQUASHFS error: read_indexes: reading block [2fa:0] [ 466.551927][ T7090] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 466.559836][ T7090] SQUASHFS error: read_indexes: reading block [2fa:0] [ 466.569204][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 466.576676][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0] [ 466.615461][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 466.757619][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 466.854135][ T7109] loop6: detected capacity change from 0 to 64 [ 467.183195][ T7117] loop0: detected capacity change from 0 to 512 [ 467.422759][ T7117] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 467.608294][ T7117] UDF-fs: Scanning with blocksize 512 failed [ 468.018328][ T7117] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 468.065949][ T7117] UDF-fs: Scanning with blocksize 1024 failed [ 468.127483][ T7117] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 468.146622][ T7117] UDF-fs: Scanning with blocksize 2048 failed [ 468.191208][ T7117] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 468.225619][ T7117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.910739][ T7162] loop6: detected capacity change from 0 to 1024 [ 470.927842][ T7162] hfsplus: unable to parse mount options [ 473.145873][ T26] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 474.138175][ T7183] loop2: detected capacity change from 0 to 64 [ 476.848448][ T7211] loop1: detected capacity change from 0 to 256 [ 477.609958][ T7211] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 479.083327][ T7225] loop6: detected capacity change from 0 to 1024 [ 479.101424][ T7225] hfsplus: unable to parse mount options [ 479.176253][ T4494] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 479.256877][ T7225] loop6: detected capacity change from 0 to 128 [ 479.264922][ T7231] loop5: detected capacity change from 0 to 8 [ 479.396921][ T27] audit: type=1800 audit(1743987929.358:16): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.621" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 479.542974][ T7231] SQUASHFS error: Failed to read block 0x2fc: -5 [ 479.549724][ T7231] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 479.557210][ T7231] SQUASHFS error: read_indexes: reading block [2fa:0] [ 479.564202][ T7231] SQUASHFS error: Failed to read block 0xfc: -5 [ 479.571267][ T7231] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 479.578716][ T7231] SQUASHFS error: read_indexes: reading block [2fa:0] [ 479.592693][ T7231] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 479.600355][ T7231] SQUASHFS error: read_indexes: reading block [2fa:0] [ 479.609323][ T7233] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 479.617101][ T7233] SQUASHFS error: read_indexes: reading block [2fa:0] [ 479.626226][ T7233] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 479.633628][ T7233] SQUASHFS error: read_indexes: reading block [2fa:0] [ 479.722608][ T7225] EXT4-fs (loop6): Test dummy encryption mode enabled [ 480.156921][ T7225] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 480.165978][ T7225] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 480.766004][ T4987] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 480.935916][ T4987] usb 7-1: device descriptor read/64, error -71 [ 481.225950][ T4987] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 481.349267][ T7245] kAFS: No cell specified [ 481.396105][ T4987] usb 7-1: device descriptor read/64, error -71 [ 481.516276][ T4987] usb usb7-port1: attempt power cycle [ 481.974760][ T27] audit: type=1326 audit(1743987931.908:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 482.771981][ T27] audit: type=1326 audit(1743987931.908:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 482.795955][ T27] audit: type=1326 audit(1743987931.908:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 482.818074][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.844061][ T27] audit: type=1326 audit(1743987931.908:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 482.909485][ T27] audit: type=1326 audit(1743987931.908:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 482.936676][ T27] audit: type=1326 audit(1743987931.908:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 482.941824][ T5814] EXT4-fs (loop6): unmounting filesystem. [ 482.967039][ T27] audit: type=1326 audit(1743987931.908:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 483.579931][ T27] audit: type=1326 audit(1743987931.908:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 483.602050][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.605933][ T27] audit: type=1326 audit(1743987931.908:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 486.332409][ T7276] loop5: detected capacity change from 0 to 8 [ 487.479554][ T27] audit: type=1326 audit(1743987931.908:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 487.540808][ T27] audit: type=1326 audit(1743987931.918:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 488.625876][ T27] audit: type=1326 audit(1743987931.918:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 488.758569][ T27] audit: type=1326 audit(1743987931.918:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 488.873261][ T27] audit: type=1326 audit(1743987931.918:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 488.904349][ T27] audit: type=1326 audit(1743987931.918:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 488.922338][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 488.936105][ T27] audit: type=1326 audit(1743987931.918:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 488.958198][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.068380][ T27] audit: type=1326 audit(1743987931.918:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 489.090495][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.260033][ T27] audit: type=1326 audit(1743987931.918:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 489.391785][ T7300] loop6: detected capacity change from 0 to 1024 [ 489.628640][ T27] audit: type=1326 audit(1743987931.918:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 489.652981][ T27] audit: type=1326 audit(1743987931.918:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 489.692407][ T7300] hfsplus: unable to parse mount options [ 489.760805][ T27] audit: type=1326 audit(1743987931.918:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 489.793854][ T4494] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.001617][ T7300] loop6: detected capacity change from 0 to 128 [ 490.022052][ T7300] EXT4-fs (loop6): Test dummy encryption mode enabled [ 490.119525][ T27] audit: type=1326 audit(1743987931.918:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 490.141989][ T27] audit: type=1326 audit(1743987931.918:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 490.143083][ T7300] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 490.164963][ T27] audit: type=1326 audit(1743987931.918:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 490.165011][ T27] audit: type=1326 audit(1743987931.918:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 490.165046][ T27] audit: type=1326 audit(1743987931.918:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 490.279705][ T27] audit: type=1326 audit(1743987931.928:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 490.334992][ T27] audit: type=1326 audit(1743987931.928:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.5.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa238d169 code=0x7ffc0000 [ 490.382931][ T7300] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.396041][ T6855] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 490.665299][ T7325] loop0: detected capacity change from 0 to 8 [ 492.444751][ T6855] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.850786][ T6855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 492.995877][ T6855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 493.056373][ T6855] usb 3-1: config 1 interface 1 has no altsetting 0 [ 493.128513][ T5814] EXT4-fs (loop6): unmounting filesystem. [ 493.270933][ T6855] usb 3-1: string descriptor 0 read error: -71 [ 493.288944][ T6855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.335830][ T6855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.402979][ T6855] usb 3-1: can't set config #1, error -71 [ 493.686895][ T6855] usb 3-1: USB disconnect, device number 6 [ 494.064214][ T7351] capability: warning: `syz.2.647' uses 32-bit capabilities (legacy support in use) [ 494.344321][ T7354] sg_write: data in/out 2031668/8 bytes for SCSI command 0x26-- guessing data in; [ 494.344321][ T7354] program syz.0.649 not setting count and/or reply_len properly [ 494.763593][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 495.036822][ T7360] loop9: detected capacity change from 0 to 8 [ 495.064445][ T7360] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 495.089700][ T7360] loop9: partition table partially beyond EOD, truncated [ 495.106128][ T7360] loop9: p1 size 81768186 extends beyond EOD, truncated [ 495.151426][ T7365] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 495.169713][ T7365] loop9: partition table partially beyond EOD, truncated [ 495.252213][ T7365] loop9: p1 size 81768186 extends beyond EOD, truncated [ 495.310831][ T7368] loop5: detected capacity change from 0 to 1024 [ 495.334892][ T7368] hfsplus: unable to parse mount options [ 495.397894][ T7368] loop5: detected capacity change from 0 to 128 [ 495.456402][ T7368] EXT4-fs (loop5): Test dummy encryption mode enabled [ 495.473878][ T7371] loop1: detected capacity change from 0 to 1024 [ 495.542335][ T7368] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 495.687316][ T7368] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 497.232655][ T7371] hfsplus: xattr searching failed [ 497.317862][ T6855] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 497.514982][ T4775] hfsplus: b-tree write err: -5, ino 3 [ 497.520906][ T6855] usb 6-1: device descriptor read/64, error -71 [ 497.826027][ T6855] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 497.985869][ T6855] usb 6-1: device descriptor read/64, error -71 [ 498.023903][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.6.663'. [ 498.026997][ T7405] loop1: detected capacity change from 0 to 64 [ 498.215702][ T6855] usb usb6-port1: attempt power cycle [ 498.700980][ T7411] Trying to free block not in datazone [ 498.709665][ T7411] Trying to free block not in datazone [ 498.715264][ T7411] Trying to free block not in datazone [ 498.727695][ T7411] Trying to free block not in datazone [ 498.819160][ T5708] EXT4-fs (loop5): unmounting filesystem. [ 500.370239][ T7431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'. [ 500.402448][ T7432] loop6: detected capacity change from 0 to 8 [ 500.706708][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 501.312873][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 501.312904][ T27] audit: type=1800 audit(1743987951.288:51): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.669" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 502.779872][ T7433] loop1: detected capacity change from 0 to 32768 [ 502.788404][ T7433] (syz.1.671,7433,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 502.800275][ T7433] (syz.1.671,7433,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 502.951901][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.676'. [ 503.242683][ T7461] loop6: detected capacity change from 0 to 1024 [ 503.273175][ T7461] hfsplus: unable to parse mount options [ 503.371075][ T7466] loop5: detected capacity change from 0 to 8 [ 503.512532][ T27] audit: type=1800 audit(1743987953.488:52): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.678" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 503.522168][ T4494] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 504.261133][ T7461] loop6: detected capacity change from 0 to 128 [ 504.286869][ T7461] EXT4-fs (loop6): Test dummy encryption mode enabled [ 504.396689][ T7461] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 504.464693][ T7461] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.798021][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.682'. [ 504.989410][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 505.345996][ T5461] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 505.516697][ T5461] usb 7-1: device descriptor read/64, error -71 [ 505.825899][ T5461] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 505.985955][ T5461] usb 7-1: device descriptor read/64, error -71 [ 506.106089][ T5461] usb usb7-port1: attempt power cycle [ 506.286268][ T5814] EXT4-fs (loop6): unmounting filesystem. [ 506.747778][ T7485] loop0: detected capacity change from 0 to 40427 [ 507.036152][ T7485] F2FS-fs (loop0): invalid crc value [ 507.121623][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.688'. [ 507.136528][ T7485] F2FS-fs (loop0): Found nat_bits in checkpoint [ 507.260164][ T7485] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 507.600384][ T4251] syz-executor: attempt to access beyond end of device [ 507.600384][ T4251] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 508.395163][ T7521] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 508.544219][ T7520] loop6: detected capacity change from 0 to 4096 [ 509.807179][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'. [ 510.480125][ T7551] loop1: detected capacity change from 0 to 1024 [ 510.532560][ T7551] hfsplus: unable to parse mount options [ 510.607669][ T7557] loop0: detected capacity change from 0 to 8 [ 510.850454][ T7557] SQUASHFS error: Failed to read block 0x2fc: -5 [ 510.857042][ T7557] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 510.864398][ T7557] SQUASHFS error: read_indexes: reading block [2fa:0] [ 510.871607][ T7557] SQUASHFS error: Failed to read block 0xfc: -5 [ 510.878659][ T7557] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 510.886054][ T7557] SQUASHFS error: read_indexes: reading block [2fa:0] [ 510.893216][ T7557] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 510.900663][ T7557] SQUASHFS error: read_indexes: reading block [2fa:0] [ 511.055896][ T27] audit: type=1800 audit(1743987960.728:53): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.699" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 511.549395][ T7551] loop1: detected capacity change from 0 to 128 [ 511.568859][ T7551] EXT4-fs (loop1): Test dummy encryption mode enabled [ 511.640627][ T7551] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 511.664224][ T7551] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 512.032375][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 512.516333][ T4332] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 512.618534][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.625083][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.726131][ T4332] usb 2-1: device descriptor read/64, error -71 [ 512.861620][ T7543] loop6: detected capacity change from 0 to 40427 [ 512.889937][ T7543] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 512.965651][ T7543] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 513.016440][ T7543] F2FS-fs (loop6): invalid crc value [ 513.065641][ T7543] F2FS-fs (loop6): Found nat_bits in checkpoint [ 513.138113][ T7576] overlayfs: overlapping lowerdir path [ 513.166063][ T4332] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 513.386292][ T4332] usb 2-1: device descriptor read/64, error -71 [ 513.738260][ T4332] usb usb2-port1: attempt power cycle [ 513.972894][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 514.982285][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'. [ 515.086609][ T7600] loop0: detected capacity change from 0 to 8 [ 515.256119][ T27] audit: type=1800 audit(1743987965.178:54): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.707" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 515.302276][ T7600] SQUASHFS error: Failed to read block 0x2fc: -5 [ 515.308994][ T7600] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 515.316484][ T7600] SQUASHFS error: read_indexes: reading block [2fa:0] [ 515.323550][ T7600] SQUASHFS error: Failed to read block 0xfc: -5 [ 515.330577][ T7600] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 515.337988][ T7600] SQUASHFS error: read_indexes: reading block [2fa:0] [ 515.346967][ T7600] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 515.354894][ T7600] SQUASHFS error: read_indexes: reading block [2fa:0] [ 515.362393][ T7601] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 515.369827][ T7601] SQUASHFS error: read_indexes: reading block [2fa:0] [ 515.377091][ T7601] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 515.384515][ T7601] SQUASHFS error: read_indexes: reading block [2fa:0] [ 516.495575][ T7620] loop5: detected capacity change from 0 to 1024 [ 516.552099][ T7620] hfsplus: unable to parse mount options [ 516.621839][ T4494] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 516.645723][ T7620] loop5: detected capacity change from 0 to 128 [ 516.686361][ T7620] EXT4-fs (loop5): Test dummy encryption mode enabled [ 516.744610][ T7620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 516.759348][ T7620] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 517.686421][ T4332] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 517.866158][ T4332] usb 6-1: device descriptor read/64, error -71 [ 518.026740][ T7617] loop1: detected capacity change from 0 to 32768 [ 518.165999][ T4332] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 518.318930][ T7617] jfs_lookup: dtSearch returned -5 [ 518.346157][ T4332] usb 6-1: device descriptor read/64, error -71 [ 518.466226][ T4332] usb usb6-port1: attempt power cycle [ 519.456054][ T4332] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 519.598017][ T5708] EXT4-fs (loop5): unmounting filesystem. [ 519.606249][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.719'. [ 519.628255][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 519.640588][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 519.654415][ T4255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 519.666980][ T4255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 519.674610][ T4255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 519.682356][ T4255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 519.689528][ T4332] usb 6-1: device not accepting address 15, error -71 [ 519.769876][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.720'. [ 519.889092][ T7653] loop5: detected capacity change from 0 to 128 [ 520.059122][ T7658] loop1: detected capacity change from 0 to 1024 [ 520.069906][ T7658] EXT4-fs: Ignoring removed nobh option [ 520.075644][ T7658] EXT4-fs: Ignoring removed bh option [ 520.103591][ T7658] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 520.180573][ T7658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 520.258711][ T7653] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 520.308258][ T7653] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 520.677368][ T7668] loop6: detected capacity change from 0 to 8 [ 521.695838][ T27] audit: type=1800 audit(1743987971.668:55): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.722" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 521.735990][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 521.910676][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 522.605682][ T5708] EXT4-fs (loop5): unmounting filesystem. [ 522.624042][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 524.595907][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 525.569014][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.669315][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.729268][ T7648] device bridge_slave_0 entered promiscuous mode [ 525.764341][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.772203][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.789937][ T7648] device bridge_slave_1 entered promiscuous mode [ 525.826413][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'. [ 526.616389][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 526.792373][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.545883][ T7722] [ 527.548265][ T7722] ====================================================== [ 527.555286][ T7722] WARNING: possible circular locking dependency detected [ 527.562322][ T7722] 6.1.132-syzkaller #0 Not tainted [ 527.567423][ T7722] ------------------------------------------------------ [ 527.574444][ T7722] syz.6.732/7722 is trying to acquire lock: [ 527.580355][ T7722] ffff888057be9bd0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 527.591061][ T7722] [ 527.591061][ T7722] but task is already holding lock: [ 527.598413][ T7722] ffff88807a54c4d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0 [ 527.608456][ T7722] [ 527.608456][ T7722] which lock already depends on the new lock. [ 527.608456][ T7722] [ 527.618850][ T7722] [ 527.618850][ T7722] the existing dependency chain (in reverse order) is: [ 527.627855][ T7722] [ 527.627855][ T7722] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 527.635406][ T7722] lock_acquire+0x1f8/0x5a0 [ 527.640458][ T7722] down_read_killable+0xc6/0xd10 [ 527.645929][ T7722] mmap_read_lock_killable+0x1d/0x60 [ 527.651735][ T7722] lock_mm_and_find_vma+0x2a7/0x2e0 [ 527.657457][ T7722] exc_page_fault+0x169/0x620 [ 527.662661][ T7722] asm_exc_page_fault+0x22/0x30 [ 527.668024][ T7722] fault_in_readable+0x1c8/0x340 [ 527.673473][ T7722] fault_in_iov_iter_readable+0xdb/0x270 [ 527.679631][ T7722] generic_perform_write+0x207/0x5e0 [ 527.685437][ T7722] __generic_file_write_iter+0x176/0x400 [ 527.691607][ T7722] generic_file_write_iter+0xab/0x310 [ 527.697505][ T7722] vfs_write+0x857/0xbc0 [ 527.702263][ T7722] ksys_write+0x19c/0x2c0 [ 527.707114][ T7722] do_syscall_64+0x3b/0xb0 [ 527.712041][ T7722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.718477][ T7722] [ 527.718477][ T7722] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 527.727165][ T7722] validate_chain+0x1661/0x5950 [ 527.732530][ T7722] __lock_acquire+0x125b/0x1f80 [ 527.737904][ T7722] lock_acquire+0x1f8/0x5a0 [ 527.742927][ T7722] down_write+0x36/0x60 [ 527.747602][ T7722] process_measurement+0x446/0x21b0 [ 527.753313][ T7722] ima_file_mmap+0x121/0x1c0 [ 527.758412][ T7722] __se_sys_remap_file_pages+0x67a/0x8b0 [ 527.764557][ T7722] do_syscall_64+0x3b/0xb0 [ 527.769484][ T7722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.775897][ T7722] [ 527.775897][ T7722] other info that might help us debug this: [ 527.775897][ T7722] [ 527.786116][ T7722] Possible unsafe locking scenario: [ 527.786116][ T7722] [ 527.793555][ T7722] CPU0 CPU1 [ 527.798934][ T7722] ---- ---- [ 527.804285][ T7722] lock(&mm->mmap_lock); [ 527.808608][ T7722] lock(&sb->s_type->i_mutex_key#12); [ 527.816587][ T7722] lock(&mm->mmap_lock); [ 527.823428][ T7722] lock(&sb->s_type->i_mutex_key#12); [ 527.828887][ T7722] [ 527.828887][ T7722] *** DEADLOCK *** [ 527.828887][ T7722] [ 527.837047][ T7722] 1 lock held by syz.6.732/7722: [ 527.841973][ T7722] #0: ffff88807a54c4d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0 [ 527.852418][ T7722] [ 527.852418][ T7722] stack backtrace: [ 527.858306][ T7722] CPU: 1 PID: 7722 Comm: syz.6.732 Not tainted 6.1.132-syzkaller #0 [ 527.866303][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 527.876349][ T7722] Call Trace: [ 527.879638][ T7722] [ 527.882595][ T7722] dump_stack_lvl+0x1e3/0x2cb [ 527.887279][ T7722] ? nf_tcp_handle_invalid+0x647/0x647 [ 527.892738][ T7722] ? print_circular_bug+0x12b/0x1a0 [ 527.897936][ T7722] check_noncircular+0x2fa/0x3b0 [ 527.902869][ T7722] ? add_chain_block+0x850/0x850 [ 527.907798][ T7722] ? lockdep_lock+0x11f/0x2a0 [ 527.912497][ T7722] ? reacquire_held_locks+0x660/0x660 [ 527.917872][ T7722] ? _find_first_zero_bit+0xd0/0x100 [ 527.923152][ T7722] validate_chain+0x1661/0x5950 [ 527.927996][ T7722] ? reacquire_held_locks+0x660/0x660 [ 527.933374][ T7722] ? __lock_acquire+0x125b/0x1f80 [ 527.938403][ T7722] ? reacquire_held_locks+0x660/0x660 [ 527.943789][ T7722] ? look_up_lock_class+0x77/0x140 [ 527.949004][ T7722] ? register_lock_class+0x100/0x990 [ 527.954335][ T7722] ? ima_match_policy+0x116/0x20a0 [ 527.959440][ T7722] ? is_dynamic_key+0x260/0x260 [ 527.964308][ T7722] ? mark_lock+0x9a/0x340 [ 527.968632][ T7722] __lock_acquire+0x125b/0x1f80 [ 527.973514][ T7722] lock_acquire+0x1f8/0x5a0 [ 527.978018][ T7722] ? process_measurement+0x446/0x21b0 [ 527.983396][ T7722] ? read_lock_is_recursive+0x10/0x10 [ 527.988795][ T7722] ? ima_lsm_policy_change+0x3f0/0x3f0 [ 527.994254][ T7722] ? __might_sleep+0xb0/0xb0 [ 527.998840][ T7722] ? ima_get_action+0x71/0xa0 [ 528.003526][ T7722] down_write+0x36/0x60 [ 528.007681][ T7722] ? process_measurement+0x446/0x21b0 [ 528.013046][ T7722] process_measurement+0x446/0x21b0 [ 528.018247][ T7722] ? ima_file_mmap+0x1c0/0x1c0 [ 528.022999][ T7722] ? __lock_acquire+0x1f80/0x1f80 [ 528.028033][ T7722] ? aa_path_link+0xea0/0xea0 [ 528.032703][ T7722] ? mtree_load+0xc45/0xdf0 [ 528.037218][ T7722] ? aa_get_current_label+0x111/0x1d0 [ 528.042586][ T7722] ? apparmor_current_getsecid_subj+0xac/0x110 [ 528.048736][ T7722] ima_file_mmap+0x121/0x1c0 [ 528.053325][ T7722] ? ima_file_free+0x3c0/0x3c0 [ 528.058094][ T7722] ? bpf_lsm_mmap_file+0x5/0x10 [ 528.062946][ T7722] ? security_mmap_file+0x11a/0x170 [ 528.068150][ T7722] __se_sys_remap_file_pages+0x67a/0x8b0 [ 528.073789][ T7722] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 528.079502][ T7722] ? print_irqtrace_events+0x210/0x210 [ 528.084961][ T7722] ? print_irqtrace_events+0x210/0x210 [ 528.090425][ T7722] ? syscall_enter_from_user_mode+0x2e/0x230 [ 528.096420][ T7722] ? lockdep_hardirqs_on+0x94/0x130 [ 528.101640][ T7722] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 528.107364][ T7722] do_syscall_64+0x3b/0xb0 [ 528.111779][ T7722] ? clear_bhb_loop+0x45/0xa0 [ 528.116461][ T7722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.122354][ T7722] RIP: 0033:0x7f1ff9b8d169 [ 528.126774][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.146379][ T7722] RSP: 002b:00007f1ffa91d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 528.154801][ T7722] RAX: ffffffffffffffda RBX: 00007f1ff9da6160 RCX: 00007f1ff9b8d169 [ 528.162788][ T7722] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 528.170757][ T7722] RBP: 00007f1ff9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 528.178723][ T7722] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 528.186691][ T7722] R13: 0000000000000000 R14: 00007f1ff9da6160 R15: 00007ffc41b9b608 [ 528.194715][ T7722] [ 528.197746][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.523578][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.594200][ T7727] loop1: detected capacity change from 0 to 8 [ 529.436446][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 529.475366][ T27] audit: type=1800 audit(1743987979.448:56): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.733" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 529.505298][ T7726] SQUASHFS error: Failed to read block 0x2fc: -5 [ 529.511761][ T7726] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 529.519180][ T7726] SQUASHFS error: read_indexes: reading block [2fa:0] [ 529.525979][ T7726] SQUASHFS error: Failed to read block 0xfc: -5 [ 529.532313][ T7726] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 529.539615][ T7726] SQUASHFS error: read_indexes: reading block [2fa:0] [ 529.546518][ T7726] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 529.553829][ T7726] SQUASHFS error: read_indexes: reading block [2fa:0] [ 529.561067][ T7727] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 529.568428][ T7727] SQUASHFS error: read_indexes: reading block [2fa:0] [ 529.575275][ T7727] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 529.582883][ T7727] SQUASHFS error: read_indexes: reading block [2fa:0] [ 529.648233][ T7648] team0: Port device team_slave_0 added [ 529.665568][ T7648] team0: Port device team_slave_1 added [ 529.777291][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.785443][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.816778][ T7648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.837372][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.844518][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.870584][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.876831][ T7648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.932609][ T7648] device hsr_slave_0 entered promiscuous mode [ 529.941731][ T7648] device hsr_slave_1 entered promiscuous mode [ 530.161274][ T7648] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 530.188849][ T7648] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 530.204887][ T7648] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 530.223465][ T7648] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 530.378384][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.413954][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.426288][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.444481][ T7648] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.467153][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.485268][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.500217][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.507391][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.530409][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.552771][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.561765][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.574051][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.581221][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.594421][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.626185][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.641295][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.665957][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 530.686321][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 530.706422][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 530.742397][ T7648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.773911][ T7648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.797108][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 530.808725][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 530.836677][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.847702][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 530.867922][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 530.887822][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.091870][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.099697][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.112495][ T7648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.222574][ T5207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.277926][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 531.286978][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.304921][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 531.313801][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.326050][ T5207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.339796][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.347913][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.356526][ T7648] device veth0_vlan entered promiscuous mode [ 531.369071][ T5207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.384811][ T7648] device veth1_vlan entered promiscuous mode [ 531.403351][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.411900][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 531.421234][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 531.432875][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.443261][ T7648] device veth0_macvtap entered promiscuous mode [ 531.453630][ T5207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.470074][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 531.479842][ T7648] device veth1_macvtap entered promiscuous mode [ 531.494703][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.506038][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.515768][ T4269] Bluetooth: hci4: command 0x0405 tx timeout [ 531.516530][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.532301][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.542945][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.553434][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.563349][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.573864][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.584514][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.595197][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.606728][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.618763][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.629519][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.640144][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.651753][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.662165][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.672748][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.682676][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.693215][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.703566][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.714041][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.727811][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.735182][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 531.744797][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 531.753689][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.762333][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.779291][ T7648] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.788770][ T7648] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.798540][ T7648] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.807903][ T7648] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.880689][ T7648] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 531.907901][ T4775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.908825][ T7648] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 531.935346][ T4775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.956429][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 531.969917][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.985978][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.999392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 532.484543][ T5207] device hsr_slave_0 left promiscuous mode [ 532.491324][ T5207] device hsr_slave_1 left promiscuous mode [ 532.498771][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.506571][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.514379][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.522937][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.531389][ T5207] device bridge_slave_1 left promiscuous mode [ 532.540217][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.549749][ T5207] device bridge_slave_0 left promiscuous mode [ 532.558314][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.570840][ T5207] device veth1_macvtap left promiscuous mode [ 532.578823][ T5207] device veth0_macvtap left promiscuous mode [ 532.762623][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 532.774140][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 532.809158][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.840117][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.899068][ T5207] bond0 (unregistering): Released all slaves