last executing test programs: 17.384873064s ago: executing program 3 (id=880): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703835322c756e695f786c6174653d312c636f6465706167653d3836392c696f636861727365743d6d616363656c7469632c756e695f786c6174653d302c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d6370313235352c696f636861727365743d63703836312c00d301af45e853320bab03ab1975ea48ce3166514697c13aa51f4872943ac22c60a839e76a7a9c44dfd54f368967d149c45f9f253e813d23cc3d9666457f9382e5ea4563130594db54791b7be2474268b9e1280f55e45119dd24f90835428467437843ec52"], 0x25, 0x336, &(0x7f0000004200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x100, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000880)=""/150, 0x96) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) sendto$inet6(r0, &(0x7f0000000180)='H', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.098523889s ago: executing program 0 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000002c0)={'veth0_to_bridge', 0x32, 0x34}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x1, 0xbd, &(0x7f0000000900)=""/189, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 15.624660804s ago: executing program 3 (id=886): r0 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="f5254266b5a3286fd0b0cc672d3084c39a8e13ba8303bee1d99e975e9258605413419943c6ddfc229bd31bb99ce1b0e97aa39e66821675a4773defcd2c5a9fdb1233034981b00dcf915044897859a700c4b816d079d8ea7c0626559447bab01d09a9771b3a1e1a06cc16c97effe800324c68fe344c163637a6e42368a257e96ae0e03db1b4e1e7b8684afa378384b4256c898f4410331e710aded5844fcd5a371547ad2fd347901d352f2e5327cc4c2f630686b94211e98cc3713c20a82d7a4e33b3ff2e3f480e992f8bb0731b69aa465348ad0112bf031ff817191ab780f1ad60eb3405d832ddb2590a22dfc8034ffdc9a5e7e6e50343"], 0x0, 0x605, &(0x7f00000016c0)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x6) unlink(&(0x7f0000000180)='./bus\x00') mkdirat(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc3b43, 0x0) syz_emit_ethernet(0x1141, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x110b, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, [{0x0, 0x1e, "8f7b1129607bea61133be6419f2b4714bf595ef4107b9cf1defec0fe37bfa0e4c90db8bc2700bdde72c7c5e104ad84bd92c55a2b61a47647e0b7b36065da66d879f735e50ef6eb264a06a6b79a7887ee9962396f88639a68f006bad7022990f57e8ef50954ada71c9ec19c80d9e31553249910f557870027677377430c5b9f96df5eae98778de59675dbd1f37f6a88c38fe01009243a69be45f4215dd102376740393facc75c4335950ed0692b5a891d7d15dabcfc2832425ec4050051f0b13f0f57609d9457a3f32ae1eb715e6c445cb6e18a69eb42fa96918aed5204f61743fc306cb41bbaa0cf91f246e4ce7837206a3a61bd"}, {0x0, 0x200000000000009d, "d4c48fd6f13435c6ca7177184deffaf45a33d6a80f787b233b6a7bce2a1fcf5c0509e1b48bf3d90d8de94ce64a798a15cb6967d0418a57ee1f4dbc2cc281f4be55c20a633b4b3a3a1636ccc9d5c03a7d4f1951b63d5ae27c8cb87ea137a62c5ab51aa3f2c0c7bd9275d96dc6f5f7c53980dde380cc35986519127cdf4225bffc86f82eb33ca276d6f3ae30577262e881536fd18cb5267104d7b445e9be283564e9db1f35d1ebee7e"}, {0x0, 0x1eb, "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"}]}}}}}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[], 0xda00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15.624064287s ago: executing program 0 (id=887): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1000, 0x85, &(0x7f0000000800)=""/133, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2af43, r2, 0x0, &(0x7f00000006c0)=[r1], &(0x7f0000000700), 0x10, 0x33b, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00'], 0x3c}}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r5, r5}, 0x0, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) r6 = dup(r0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 14.346813316s ago: executing program 4 (id=890): socket(0x10, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 13.624116582s ago: executing program 0 (id=892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE(r3, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x8009, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000980)='./file0\x00', &(0x7f0000000000), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) 13.081892299s ago: executing program 4 (id=894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000950b0b72ed7688ac36aef723cbf1da399487dcbeddb7d95ae07e3502a61ea57614b8b5ea81aeaabcd9ddac97af6e6405918a952537a6a558d13c5e0b080f49c7bbd2c4a3543ef24ebde57f4833c9df9950adf631fbc414"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000e10000000000000000000000001811000086241a5f1b77623a7c140b9f7d9bec48566024a0d9b0f59eec7664f6eba5e2737475d9c923a3924ed0cb9a006a0d9abcc1f3c26d7b838ed532a12ccf6c5d4ffe578b", @ANYRES64, @ANYBLOB="0000000000000000b7080075bbc0c29248d491ff00000000bfa257000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r4, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) 12.985630306s ago: executing program 3 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.719970674s ago: executing program 0 (id=897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0xb8) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x60f, &(0x7f0000000c40)="$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") write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0xfd14) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000380)='q', 0x1}], 0x1) 11.77930536s ago: executing program 3 (id=899): socket$kcm(0x10, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = dup(r1) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x10000000000000) sendfile(r4, r3, 0x0, 0x8a000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x2004, &(0x7f0000000380), 0x0, 0x55c4, &(0x7f000000ac00)="$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") 11.578131513s ago: executing program 4 (id=900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x19e6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.761394665s ago: executing program 1 (id=902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x3c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x2004c084) 9.216848435s ago: executing program 1 (id=903): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r0, r0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) 9.17401s ago: executing program 2 (id=904): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4, 0xc0}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(0x0, 0x0, 0x0) fadvise64(r3, 0x0, 0x9892, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0), 0x0, 0x9000) 9.027598247s ago: executing program 0 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs$pagemap(r0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x2c}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 8.552157088s ago: executing program 4 (id=906): syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000740)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000001480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) 8.467981984s ago: executing program 3 (id=907): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = userfaultfd(0x801) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 7.328838845s ago: executing program 0 (id=908): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000300)=0x208) bind$inet6(r1, &(0x7f0000000000), 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 7.328506335s ago: executing program 3 (id=909): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f0000000100)=ANY=[], 0x4, 0x5ce, &(0x7f00000006c0)="$eJzs3U9rHOcdB/DvrNay5IKjJHbitoGKlP6horZW67ZJwVQtpugQSsCvQNTrWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWSdh1/Pvaz8zz7zPzmN7+dGWlXAgV4aa0spPkwRVYW3tsqxzvb7e7OdvvuoJ/kbJJG9T/NsvvPZOpBMp9+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umW5TnL5GOM9+sbxiuERlkGvD4JPgsfP958T3P3UCcbmCIpnvBZzybkkM/V9YHDiNk43u+M3MRcgAAAAnKBXdrObrZwfdx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIqn//n9Rt8agP59i8Pf/p+vnUvdfaA/HnQAAAAAAAAAAHIMf7GY3Wzk/GD8uqp/5v10NLlSP38nH2UwnG7mcrayml1420koyNxJoemu119toHWLLpX23XDqd4wUAAAAAAACAb6m/ZGXv5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJimSqv6jahUF/Lo1mkpkk0+V695J/DPovsofjTgAAAABOwSu72c1Wzg/Gj4vqPf8b1fv+mXyc9fSyll666eRm9VlA/11/Y2e73d3Zbt8t29Nxf/vvI6VRRUz/s4f993ypWmM2t7JWPXM5f8yH6eZmGtWWpUuDfPbP636ZU/Gb2iEzu1kvi6T4fv1pyGSYqypyZliRxTq3shqvHlyJI746T+6plcbwk58LJ1Dzc/WyrPnMRNd8aeTse+PgSiQ/uvbf9dvd9Tu3b20uTM4hfU1PVqI9Uok3X6pKLFaVuDgcr+T3uZGFzOf9bGQtf8pqeulkPter3mp9PpePcwdXavkro/efl8l0/br076JHy+ntatvzWcsf8mFuppNfZilX805a+VX17+rIK3zxEFd942hX/Q9/WndeS4rZ/nJClHV9daSuo/fcuWpu9Jm9Kr12/PfG5vfqzlRSNIc5TYInK9EaqcTrB1fir4/Lx83u+p2N26sfHXJ/P6mX5VeJsxP1VWK6Pnub1eirZ0c59/q+c61q7sJwrvHU3MXh3POu1On6e7inIy1Vc2/uO9eu5i6NzO33/RYAE+/cz85Nz/5r9u+zn80+mL09+97M786+c/at6Zx5dObXzcWpHzfeKv6Wz/Lnvff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17f5yad3VrvdzoaOjo7OsDPuOxOn4Urv7kdXNj/59Odrd1c/6HzQWW8v/mLp3XZr6d2rV26tdTuL/cdxp8kJ2bvox50JAAAAAAAAAAAAR3Eav0467mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxbGykObDFGktXl4sxzvb7W7ZBv29NRtJmuXyf8nUg2Q+/Za5kXDFs/Zz7YvPm/ny/o29WI3B+lMHbXc49+qW5TrJ5WOM9+gbxyuGR1gGvT4IDuP2/wAAAP//wg8dzA==") sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x2080d0, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@appraise_type}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '-'}}]}, 0xfc, 0x58c, &(0x7f0000001000)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 7.302702027s ago: executing program 1 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) io_setup(0xa4, &(0x7f0000000300)=0x0) io_submit(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.385906426s ago: executing program 4 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7}) 5.308343194s ago: executing program 2 (id=912): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x4b, [0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8fca], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r6 = dup(r5) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r6, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$inet(0x2, 0x80001, 0x84) 5.297605183s ago: executing program 1 (id=913): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x8}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[], 0x6a) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001901030000000000001500000a000000003e9f3f3a03000008001e0000000006e1c2a9c7a698a78592721ca3cb15738b00"/63], 0x24}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0}}, 0x18) 3.741863788s ago: executing program 1 (id=914): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x10, 0xffffffff, 0x0, 0x515f3157, 0x0, "7de114100985a79874342a70e113fe49a5f51f"}) getdents64(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2868b0, &(0x7f0000000240)) ioprio_set$uid(0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3.635025672s ago: executing program 2 (id=915): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200058c0}, 0x40000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c0000040000001400018008001600000000000600060088480000080002"], 0x1034}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r1 = creat(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000001200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000003c0)={0x3, @sdr={0x32315659, 0x93}}) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.40888821s ago: executing program 2 (id=916): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f00000008c0), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r3 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, r3}) getsockopt$packet_int(r2, 0x107, 0x9, 0x0, &(0x7f0000000280)) fcntl$setownex(0xffffffffffffffff, 0x9, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xffffffff0000, 0x3, &(0x7f0000ff9000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000080)={0x7, 'veth1_to_batadv\x00', {0x7}, 0x9}) 3.223385002s ago: executing program 2 (id=917): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x202, 0x0) write$binfmt_misc(r0, &(0x7f0000002d40), 0x4c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x9) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r2, &(0x7f0000003080)={'a', ' *:* ', 'r\x00'}, 0x17) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x26e1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x20}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0xffffffcd, &(0x7f0000002800)={0xa, 0x4e24, 0x0, @empty}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7001, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="000000000100"}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) 3.184850655s ago: executing program 2 (id=918): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x18}, 0x4008044) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x6080) recvmsg(r1, 0x0, 0x2102) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001340)=""/102378, 0x7706c522012798af) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000001d80)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 1.071578ms ago: executing program 1 (id=919): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x3}, 'port0\x00', 0xa0bf83d7d46f2cd7, 0x400, 0x3, 0x0, 0xfffffffe, 0x2000}) getdents(0xffffffffffffffff, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={0x0, r5}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x61) unshare(0x64000600) kernel console output (not intermixed with test programs): netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.147076][ T5282] usb 4-1: Product: syz [ 133.151777][ T6879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.169504][ T5282] usb 4-1: Manufacturer: syz [ 133.174139][ T5282] usb 4-1: SerialNumber: syz [ 133.188452][ T6879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.197180][ T6879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.207807][ T5282] usb 4-1: config 0 descriptor?? [ 133.245032][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.300555][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.307686][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.326500][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.348700][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.380723][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.387879][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.407782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.416610][ T5285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.442714][ T5282] usb 4-1: USB disconnect, device number 6 [ 133.443850][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.501682][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.512772][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.549964][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.567995][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.580235][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 133.588280][ T5285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.617997][ T5285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.631602][ T5285] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 133.646861][ T7208] raw_sendmsg: syz.4.441 forgot to set AF_INET. Fix it! [ 133.664642][ T5285] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 133.706587][ T5285] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.727784][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.766622][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.771908][ T5285] hub 3-1:1.0: bad descriptor, ignoring hub [ 133.784248][ T5285] hub 3-1:1.0: probe with driver hub failed with error -5 [ 133.793708][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 133.800172][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 133.808037][ T5285] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 133.828143][ T5285] cdc_wdm 3-1:1.0: Unknown control protocol [ 133.883726][ T6894] veth0_vlan: entered promiscuous mode [ 133.905638][ T6894] veth1_vlan: entered promiscuous mode [ 133.954113][ T6894] veth0_macvtap: entered promiscuous mode [ 133.989804][ T6894] veth1_macvtap: entered promiscuous mode [ 134.001030][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.005405][ T5229] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.023015][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.043275][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.078761][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.106040][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.118861][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.132452][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.153949][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.178021][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.198697][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.220802][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.240814][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.261140][ T7221] loop0: detected capacity change from 0 to 32768 [ 134.267700][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.285246][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.286522][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.301219][ T7221] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.470 (7221) [ 134.327508][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.346868][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.358002][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.368650][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.377438][ T7221] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.394933][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.405495][ T7221] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 134.405582][ T7221] BTRFS info (device loop0): using free-space-tree [ 134.424422][ T5283] usb 3-1: USB disconnect, device number 3 [ 134.461997][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.471952][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.484801][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.494988][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.505573][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.515769][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.526356][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.543707][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.551619][ T29] audit: type=1800 audit(1728390448.283:24): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.470" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 134.602717][ T29] audit: type=1804 audit(1728390448.313:25): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.470" name="/newroot/1/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 134.629149][ T6894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.644244][ T6894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.649256][ T6879] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.656769][ T6894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.686875][ T6894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.780199][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.797132][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.818401][ T5284] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.008674][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 135.039439][ T5284] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 135.194010][ T7274] loop3: detected capacity change from 0 to 128 [ 135.197955][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.221941][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.254613][ T7274] FAT-fs (loop3): invalid media value (0x00) [ 135.254633][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.258384][ T5284] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.269683][ C0] Unknown status report in ack skb [ 135.292062][ T5284] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.297059][ T7274] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 135.308886][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.337079][ T5284] hub 3-1:1.0: bad descriptor, ignoring hub [ 135.345432][ T7274] FAT-fs (loop3): Can't find a valid FAT filesystem [ 135.372142][ T5284] hub 3-1:1.0: probe with driver hub failed with error -5 [ 135.451540][ T5284] cdc_wdm 3-1:1.0: skipping garbage [ 135.456797][ T5284] cdc_wdm 3-1:1.0: skipping garbage [ 135.512075][ T5284] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 135.523742][ T7287] loop2: detected capacity change from 0 to 7 [ 135.587500][ T7287] Dev loop2: unable to read RDB block 7 [ 135.593567][ T7287] loop2: unable to read partition table [ 135.602010][ T5284] usb 3-1: USB disconnect, device number 4 [ 135.628580][ T7287] loop2: partition table beyond EOD, truncated [ 135.646710][ T7287] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.839527][ T7302] loop3: detected capacity change from 0 to 1024 [ 135.932503][ T5704] hfsplus: b-tree write err: -5, ino 4 [ 135.993768][ T7285] loop1: detected capacity change from 0 to 32768 [ 136.018875][ T7285] btrfs: Deprecated parameter 'usebackuproot' [ 136.035214][ T7285] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.055062][ T7285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.447 (7285) [ 136.121839][ T7285] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.158498][ T7285] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 136.162333][ T7318] loop2: detected capacity change from 0 to 64 [ 136.177482][ T7285] BTRFS info (device loop1): disk space caching is enabled [ 136.200210][ T7285] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 136.349444][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 136.421686][ T7285] BTRFS info (device loop1): scrub: started on devid 1 [ 136.433303][ T7285] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 136.492663][ T7311] loop3: detected capacity change from 0 to 32768 [ 136.986944][ T6894] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.707585][ T7352] loop4: detected capacity change from 0 to 40427 [ 137.736048][ T7352] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 137.744792][ T7352] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 137.777527][ T7352] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.917399][ T7352] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 137.917491][ T7379] kvm: pic: non byte write [ 137.943686][ T7352] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.978759][ T7352] syz.4.490: attempt to access beyond end of device [ 137.978759][ T7352] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.996940][ T29] audit: type=1804 audit(1728390451.733:26): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.490" name="/newroot/3/file2/file1" dev="loop4" ino=10 res=1 errno=0 [ 137.997867][ T7352] syz.4.490: attempt to access beyond end of device [ 137.997867][ T7352] loop4: rw=2049, sector=45104, nr_sectors = 64 limit=40427 [ 138.045918][ T6886] syz-executor: attempt to access beyond end of device [ 138.045918][ T6886] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 138.061705][ T6886] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 139.226452][ T7401] Bluetooth: MGMT ver 1.23 [ 139.246976][ T7403] evm: overlay not supported [ 139.297446][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 139.307239][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 140.091854][ T7425] loop4: detected capacity change from 0 to 512 [ 140.714326][ T7433] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.729287][ T5283] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.480107][ T7438] loop0: detected capacity change from 0 to 1024 [ 141.536139][ T7438] ext4: Unknown parameter 'func' [ 142.623156][ T7444] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 142.633291][ T7444] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 142.696770][ T7442] loop4: detected capacity change from 0 to 32768 [ 142.704537][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 142.724849][ T7444] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.520' resets device [ 142.739517][ T5283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.751586][ T5283] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.768506][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.779111][ T5283] usb 2-1: Product: syz [ 142.783480][ T5283] usb 2-1: Manufacturer: syz [ 142.788797][ T5283] usb 2-1: SerialNumber: syz [ 142.793540][ T7442] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.803803][ T5283] usb 2-1: config 0 descriptor?? [ 142.810869][ T7427] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 142.837065][ T7442] XFS (loop4): Ending clean mount [ 142.843983][ T7442] XFS (loop4): Quotacheck needed: Please wait. [ 142.856734][ T7442] XFS (loop4): Quotacheck: Done. [ 142.882009][ T29] audit: type=1800 audit(1728390456.623:27): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.518" name="file1" dev="loop4" ino=6158 res=0 errno=0 [ 142.919406][ T6886] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.088782][ T5283] usb 2-1: USB disconnect, device number 6 [ 143.210781][ T7458] loop0: detected capacity change from 0 to 32768 [ 143.217729][ T7458] XFS: attr2 mount option is deprecated. [ 143.716599][ T7458] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 143.770411][ T7458] XFS (loop0): Ending clean mount [ 143.787816][ T5316] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 143.803501][ T5316] XFS (loop0): Unmount and run xfs_repair [ 143.815288][ T5316] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 143.815963][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.823282][ T5316] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 143.842620][ T5316] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 143.852093][ T5316] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 143.861066][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.862882][ T5316] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 143.877750][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.879963][ T5316] 00000040: ff ff ff ff ff ff 01 00 00 00 00 00 00 00 00 00 ................ [ 143.888422][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.894169][ T5316] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.912645][ T5316] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.919298][ T7488] loop2: detected capacity change from 0 to 1024 [ 143.922836][ T5316] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.933084][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.946765][ T7458] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 143.959653][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.967160][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.974829][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.974953][ T6879] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 143.982312][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982337][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982359][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982382][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982405][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982426][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982449][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982472][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.982493][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.993687][ T6879] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 143.998703][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.078267][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.085800][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.093258][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.094416][ T7488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.100722][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.100750][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.100773][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.100795][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.100816][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.151776][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.159229][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.166646][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.174109][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.181686][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.189138][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.198014][ T25] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 144.273375][ T7495] loop0: detected capacity change from 0 to 128 [ 144.278397][ T5285] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.281605][ T7495] ufs: You didn't specify the type of your ufs filesystem [ 144.281605][ T7495] [ 144.281605][ T7495] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.281605][ T7495] [ 144.281605][ T7495] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.324478][ T7495] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 144.451831][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 144.468405][ T5285] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 144.483569][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.503987][ T5285] usb 4-1: config 0 descriptor?? [ 144.513580][ T5285] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 144.714556][ T5285] usb 4-1: USB disconnect, device number 7 [ 144.994484][ T7514] netlink: 'syz.4.536': attribute type 3 has an invalid length. [ 145.045645][ T7514] netlink: 'syz.4.536': attribute type 3 has an invalid length. [ 145.084784][ T7514] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.536' resets device [ 145.382287][ T7525] loop3: detected capacity change from 0 to 1024 [ 145.433321][ T7525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.552402][ T6835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.646480][ T7521] loop0: detected capacity change from 0 to 32768 [ 146.501938][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.660306][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 146.675273][ T8] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 146.684627][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.703430][ T8] usb 3-1: Product: syz [ 146.708084][ T8] usb 3-1: Manufacturer: syz [ 146.714819][ T8] usb 3-1: SerialNumber: syz [ 146.720549][ T5249] Bluetooth: hci2: command 0x0405 tx timeout [ 146.732515][ T8] usb 3-1: config 0 descriptor?? [ 146.906492][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.984265][ T8] kaweth 3-1:0.0: Firmware present in device. [ 146.994389][ T8] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 147.003380][ T8] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 147.018622][ T8] usb 3-1: USB disconnect, device number 5 [ 148.821058][ T7582] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 148.835612][ T7581] loop0: detected capacity change from 0 to 1024 [ 148.849121][ T7581] EXT4-fs: Ignoring removed oldalloc option [ 148.872370][ T7584] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.899717][ T7582] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 148.904279][ T7585] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.555' resets device [ 148.916767][ T7581] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 148.975532][ T7581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.235001][ T6879] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.217877][ T7610] loop0: detected capacity change from 0 to 256 [ 150.259833][ T7610] exfat: Deprecated parameter 'utf8' [ 150.274320][ T7610] exfat: Deprecated parameter 'utf8' [ 150.813291][ T7610] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 151.607558][ T7620] loop4: detected capacity change from 0 to 512 [ 151.927548][ T7620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.950635][ T7620] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.275839][ T7635] loop2: detected capacity change from 0 to 1024 [ 152.344328][ T7620] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.571: corrupted inode contents [ 152.357409][ T7620] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.571: mark_inode_dirty error [ 152.366422][ T7635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.375084][ T7620] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.571: corrupted inode contents [ 152.480477][ T7620] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.571: mark_inode_dirty error [ 152.681097][ T6886] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.971285][ T7651] loop0: detected capacity change from 0 to 1024 [ 153.013120][ T7653] netlink: 'syz.3.576': attribute type 3 has an invalid length. [ 153.021775][ T7653] netlink: 'syz.3.576': attribute type 3 has an invalid length. [ 153.069289][ T7651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.762089][ T6835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.782189][ T7670] loop1: detected capacity change from 0 to 16 [ 158.797507][ T7670] erofs: (device loop1): mounted with root inode @ nid 36. [ 158.932644][ T6879] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.961973][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 158.994246][ T7678] team1: Mode changed to "activebackup" [ 159.759555][ T7703] loop3: detected capacity change from 0 to 1024 [ 159.821249][ T7703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.914464][ T7711] netlink: 'syz.2.589': attribute type 3 has an invalid length. [ 159.935704][ T7711] netlink: 'syz.2.589': attribute type 3 has an invalid length. [ 160.073759][ T7711] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.589' resets device [ 160.512936][ T7712] loop0: detected capacity change from 0 to 32768 [ 160.528868][ T7712] XFS: noikeep mount option is deprecated. [ 161.175073][ T7723] loop1: detected capacity change from 0 to 1024 [ 161.212378][ T7712] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 161.221695][ T7723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.263896][ T7712] XFS (loop0): Ending clean mount [ 161.293238][ T7712] XFS (loop0): Quotacheck needed: Please wait. [ 161.332294][ T7712] XFS (loop0): Quotacheck: Done. [ 161.483447][ T6879] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 161.504381][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.340730][ T7750] overlayfs: failed to resolve './file1': -2 [ 162.705252][ T7745] loop3: detected capacity change from 0 to 32768 [ 162.748154][ T7745] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.783787][ T7745] XFS (loop3): Ending clean mount [ 162.791234][ T7745] XFS (loop3): Quotacheck needed: Please wait. [ 162.804515][ T7745] XFS (loop3): Quotacheck: Done. [ 162.837420][ T5229] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.233503][ T7770] syz.2.604 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 164.222614][ T7780] loop2: detected capacity change from 0 to 512 [ 164.376732][ T7769] loop0: detected capacity change from 0 to 32768 [ 164.638006][ T7769] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.955909][ T7769] XFS (loop0): Ending clean mount [ 166.553523][ T6894] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.585135][ T6879] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.804102][ T7813] loop1: detected capacity change from 0 to 256 [ 167.492946][ T7821] loop4: detected capacity change from 0 to 32768 [ 167.773779][ T7821] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.877464][ T7815] loop2: detected capacity change from 0 to 32768 [ 168.031895][ T7815] syz.2.618: attempt to access beyond end of device [ 168.031895][ T7815] loop2: rw=0, sector=38936, nr_sectors = 8 limit=32768 [ 168.060572][ T7815] lbmIODone: I/O error in JFS log [ 168.069473][ T7815] syz.2.618: attempt to access beyond end of device [ 168.069473][ T7815] loop2: rw=2049, sector=38936, nr_sectors = 8 limit=32768 [ 168.094257][ T7821] XFS (loop4): Ending clean mount [ 168.448716][ T7815] lbmIODone: I/O error in JFS log [ 168.454010][ T7815] lmLogInit: exit(-5) [ 168.458008][ T7815] lmLogOpen: exit(-5) [ 168.468731][ T7815] jfs_mount_rw failed, return code = -5 [ 168.560174][ T6886] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.615157][ T7848] loop2: detected capacity change from 0 to 1024 [ 168.662926][ T7848] hfsplus: bad catalog folder entry [ 169.345411][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.447912][ T7840] loop0: detected capacity change from 0 to 32768 [ 169.478229][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.504010][ T7840] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 169.537302][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.687423][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.206959][ T5249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.338535][ T7840] loop0: detected capacity change from 32768 to 0 [ 170.349778][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.362263][ T12] bridge_slave_1: left allmulticast mode [ 170.369487][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.556682][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.564705][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.572678][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.596992][ T12] bridge_slave_1: left promiscuous mode [ 170.609627][ T6879] syz-executor: attempt to access beyond end of device [ 170.609627][ T6879] loop0: rw=0, sector=17057, nr_sectors = 1 limit=0 [ 170.623226][ T6879] (syz-executor,6879,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 170.632223][ T6879] syz-executor: attempt to access beyond end of device [ 170.632223][ T6879] loop0: rw=0, sector=17057, nr_sectors = 1 limit=0 [ 170.636830][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.645678][ T6879] (syz-executor,6879,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 170.716521][ T12] bridge_slave_0: left allmulticast mode [ 170.738218][ T7880] overlayfs: failed to get inode (-116) [ 170.756632][ T12] bridge_slave_0: left promiscuous mode [ 170.768479][ T7880] overlayfs: failed to look up (file0) for ino (-116) [ 170.775522][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.943198][ T7884] loop4: detected capacity change from 0 to 4096 [ 170.980771][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.001079][ T7885] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.013774][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.035226][ T12] bond0 (unregistering): Released all slaves [ 171.177372][ T7882] loop3: detected capacity change from 0 to 32768 [ 171.189945][ T7875] loop1: detected capacity change from 0 to 40427 [ 171.204011][ T7882] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.636 (7882) [ 171.222191][ T7875] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 171.230174][ T7875] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 171.240345][ T6879] syz-executor: attempt to access beyond end of device [ 171.240345][ T6879] loop0: rw=2049, sector=9552, nr_sectors = 8 limit=0 [ 171.247500][ T7882] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.255638][ T6879] syz-executor: attempt to access beyond end of device [ 171.255638][ T6879] loop0: rw=2049, sector=9560, nr_sectors = 1 limit=0 [ 171.281279][ T7875] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1fffff [ 171.296310][ T6879] Buffer I/O error on dev loop0, logical block 9560, lost async page write [ 171.299366][ T7882] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 171.310822][ T7859] jbd2/loop0-75: attempt to access beyond end of device [ 171.310822][ T7859] loop0: rw=38913, sector=640, nr_sectors = 1 limit=0 [ 171.327342][ T7875] F2FS-fs (loop1): invalid crc value [ 171.327384][ T7859] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 171.343851][ T7859] JBD2: I/O error when updating journal superblock for loop0-75. [ 171.352529][ T7859] Aborting journal on device loop0-75. [ 171.368568][ T7859] jbd2/loop0-75: attempt to access beyond end of device [ 171.368568][ T7859] loop0: rw=38913, sector=640, nr_sectors = 1 limit=0 [ 171.388980][ T7859] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 171.391592][ T7875] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.397543][ T7859] JBD2: I/O error when updating journal superblock for loop0-75. [ 171.411681][ T7859] journal_release_journal_head: freeing b_committed_data [ 171.418946][ T7882] BTRFS info (device loop3): using free-space-tree [ 171.431121][ T6879] (syz-executor,6879,1):ocfs2_start_trans:357 ERROR: status = -30 [ 171.471627][ T6879] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 171.487456][ T6879] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 171.497350][ T6879] OCFS2: Returning error to the calling process. [ 171.503756][ T6879] (syz-executor,6879,1):ocfs2_shutdown_local_alloc:419 ERROR: status = -30 [ 171.512460][ T6879] syz-executor: attempt to access beyond end of device [ 171.512460][ T6879] loop0: rw=1, sector=17024, nr_sectors = 1 limit=0 [ 171.525803][ T6879] Buffer I/O error on dev loop0, logical block 17024, lost sync page write [ 171.534634][ T6879] (syz-executor,6879,1):ocfs2_write_block:78 ERROR: status = -5 [ 171.542495][ T6879] (syz-executor,6879,1):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 171.553703][ T6879] (syz-executor,6879,1):ocfs2_put_slot:517 ERROR: status = -5 [ 171.556641][ T7875] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 171.561591][ T6879] (syz-executor,6879,1):ocfs2_journal_shutdown:1085 ERROR: status = -5 [ 171.570462][ T7875] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.580853][ T7868] chnl_net:caif_netlink_parms(): no params data found [ 171.594656][ T6879] ocfs2: Unmounting device (7,0) on (node local) [ 171.692472][ T6894] syz-executor: attempt to access beyond end of device [ 171.692472][ T6894] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 171.770958][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.789479][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.824509][ T7868] bridge_slave_0: entered allmulticast mode [ 171.837766][ T7868] bridge_slave_0: entered promiscuous mode [ 171.882864][ T12] hsr_slave_0: left promiscuous mode [ 171.903839][ T12] hsr_slave_1: left promiscuous mode [ 171.911728][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 171.920367][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.927807][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.932308][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 171.956221][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.989185][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 171.996101][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.003407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.017834][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.028539][ T12] veth1_macvtap: left promiscuous mode [ 172.034064][ T12] veth0_macvtap: left promiscuous mode [ 172.041524][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.052491][ T12] veth1_vlan: left promiscuous mode [ 172.060704][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.068640][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.075866][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.083346][ T12] veth0_vlan: left promiscuous mode [ 172.083840][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.095876][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.103905][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.111232][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.121492][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.121669][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.138457][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.145352][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.168384][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.175299][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.183524][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.186984][ T5229] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.190643][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.212540][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.364810][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.367038][ T7939] loop3: detected capacity change from 0 to 2048 [ 172.382648][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.425118][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.432497][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.439463][ T7939] loop3: p3 < > p4 < > [ 172.444818][ T7939] loop3: partition table partially beyond EOD, truncated [ 172.449780][ T7868] bridge_slave_1: entered allmulticast mode [ 172.462399][ T7868] bridge_slave_1: entered promiscuous mode [ 172.468839][ T7939] loop3: p3 start 4284289 is beyond EOD, truncated [ 172.537791][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.593393][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.624298][ T7939] kvm: emulating exchange as write [ 172.642899][ T5245] Bluetooth: hci1: command tx timeout [ 172.685510][ T7868] team0: Port device team_slave_0 added [ 172.725589][ T7868] team0: Port device team_slave_1 added [ 172.801865][ T7934] chnl_net:caif_netlink_parms(): no params data found [ 172.826090][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.839759][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.894647][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.906799][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.913889][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.940134][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.020549][ T7959] netlink: 'syz.3.647': attribute type 3 has an invalid length. [ 173.028356][ T7959] netlink: 'syz.3.647': attribute type 3 has an invalid length. [ 173.046901][ T7959] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.647' resets device [ 173.423199][ T7868] hsr_slave_0: entered promiscuous mode [ 173.433736][ T7868] hsr_slave_1: entered promiscuous mode [ 173.450684][ T7868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.460268][ T7868] Cannot create hsr debugfs directory [ 173.490116][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.496774][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.509825][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.517101][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.530547][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.538366][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.546494][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.569826][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.584783][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.593011][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.601556][ T7934] bridge_slave_0: entered allmulticast mode [ 173.608116][ T7934] bridge_slave_0: entered promiscuous mode [ 173.615793][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.623072][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.632441][ T7934] bridge_slave_1: entered allmulticast mode [ 173.639687][ T7934] bridge_slave_1: entered promiscuous mode [ 173.709414][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.726515][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.754341][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.784185][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.795999][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.834666][ T7934] team0: Port device team_slave_0 added [ 173.842984][ T7934] team0: Port device team_slave_1 added [ 173.900145][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.907719][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.936677][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.954549][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.962900][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.989417][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.085664][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.142638][ T7934] hsr_slave_0: entered promiscuous mode [ 174.149252][ T7934] hsr_slave_1: entered promiscuous mode [ 174.155217][ T7934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.165072][ T7934] Cannot create hsr debugfs directory [ 174.181740][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.234269][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.238556][ T5249] Bluetooth: hci3: command tx timeout [ 174.288873][ T7965] chnl_net:caif_netlink_parms(): no params data found [ 174.320581][ T7868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.335573][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.359412][ T7868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.380920][ T7868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.414690][ T7868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.527950][ T12] bridge_slave_1: left allmulticast mode [ 174.544572][ T12] bridge_slave_1: left promiscuous mode [ 174.552244][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.561225][ T12] bridge_slave_0: left allmulticast mode [ 174.566896][ T12] bridge_slave_0: left promiscuous mode [ 174.572819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.581301][ T12] bridge_slave_1: left allmulticast mode [ 174.586936][ T12] bridge_slave_1: left promiscuous mode [ 174.592800][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.602240][ T12] bridge_slave_0: left allmulticast mode [ 174.607897][ T12] bridge_slave_0: left promiscuous mode [ 174.613893][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.758418][ T5249] Bluetooth: hci1: command tx timeout [ 174.966482][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.085673][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.218941][ T12] bond0 (unregistering): Released all slaves [ 175.229927][ T8014] loop4: detected capacity change from 0 to 64 [ 175.246386][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.256860][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.284379][ T12] bond0 (unregistering): Released all slaves [ 175.295250][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.303028][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.310659][ T7965] bridge_slave_0: entered allmulticast mode [ 175.317425][ T7965] bridge_slave_0: entered promiscuous mode [ 175.325144][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.333537][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.342165][ T7965] bridge_slave_1: entered allmulticast mode [ 175.349981][ T7965] bridge_slave_1: entered promiscuous mode [ 175.407060][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.427232][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.486496][ T7965] team0: Port device team_slave_0 added [ 175.530103][ T7965] team0: Port device team_slave_1 added [ 175.618632][ T5249] Bluetooth: hci2: command tx timeout [ 175.651062][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.665171][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.694693][ T7868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.708197][ T7868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.721426][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.731966][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.759531][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.778577][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.785669][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.894773][ T8030] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.657' resets device [ 175.906878][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.107168][ T5249] Bluetooth: hci0: command 0x0406 tx timeout [ 176.147651][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.154828][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.171627][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.178786][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.205541][ T8029] netlink: 'syz.3.657': attribute type 3 has an invalid length. [ 176.213461][ T8029] netlink: 'syz.3.657': attribute type 3 has an invalid length. [ 176.318726][ T5245] Bluetooth: hci3: command tx timeout [ 176.346432][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.372270][ T7868] veth0_vlan: entered promiscuous mode [ 176.381960][ T7868] veth1_vlan: entered promiscuous mode [ 176.569520][ T7965] hsr_slave_0: entered promiscuous mode [ 176.575911][ T7965] hsr_slave_1: entered promiscuous mode [ 176.676543][ T7965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.684606][ T7965] Cannot create hsr debugfs directory [ 176.824105][ T7868] veth0_macvtap: entered promiscuous mode [ 176.830951][ T5245] Bluetooth: hci1: command tx timeout [ 176.893205][ T12] hsr_slave_0: left promiscuous mode [ 176.927898][ T12] hsr_slave_1: left promiscuous mode [ 176.973992][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.981033][ T8040] loop4: detected capacity change from 0 to 32768 [ 176.983064][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.997105][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.005521][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.027661][ T12] hsr_slave_0: left promiscuous mode [ 177.033893][ T12] hsr_slave_1: left promiscuous mode [ 177.041487][ T8040] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.050770][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.058222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.066267][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.073905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.085792][ T12] veth1_macvtap: left promiscuous mode [ 177.091393][ T12] veth0_macvtap: left promiscuous mode [ 177.096960][ T12] veth1_vlan: left promiscuous mode [ 177.102001][ T8040] XFS (loop4): Ending clean mount [ 177.102360][ T12] veth0_vlan: left promiscuous mode [ 177.111840][ T8040] XFS (loop4): Quotacheck needed: Please wait. [ 177.119452][ T12] veth1_macvtap: left promiscuous mode [ 177.125030][ T12] veth0_macvtap: left promiscuous mode [ 177.126242][ T8040] XFS (loop4): Quotacheck: Done. [ 177.132208][ T12] veth1_vlan: left promiscuous mode [ 177.148497][ T12] veth0_vlan: left promiscuous mode [ 177.226880][ T8040] xfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá' [ 177.277514][ T6886] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.399274][ T12] team0 (unregistering): Port device team_slave_1 removed [ 177.493857][ T12] team0 (unregistering): Port device team_slave_0 removed [ 177.738537][ T5245] Bluetooth: hci2: command tx timeout [ 178.353958][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.415939][ T12] team0 (unregistering): Port device team_slave_0 removed [ 178.425400][ T5245] Bluetooth: hci3: command tx timeout [ 178.503783][ T8076] loop3: detected capacity change from 0 to 4096 [ 178.633328][ T7934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.655211][ T7868] veth1_macvtap: entered promiscuous mode [ 178.712436][ T7934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.727246][ T7934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.861468][ T8087] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.667' resets device [ 178.950883][ T5245] Bluetooth: hci1: command tx timeout [ 179.131659][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.155618][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.166429][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.179658][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.189700][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.217567][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.303198][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.352296][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.403795][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.498191][ T8086] netlink: 'syz.4.667': attribute type 3 has an invalid length. [ 179.506487][ T8086] netlink: 'syz.4.667': attribute type 3 has an invalid length. [ 179.570511][ T7934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.597809][ T8090] loop3: detected capacity change from 0 to 128 [ 179.615024][ T8090] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.615640][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.637815][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.648048][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.659001][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.669017][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.679458][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.689347][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.699810][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.710619][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.718967][ T8090] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.760621][ T7868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.769543][ T5245] Bluetooth: hci2: command tx timeout [ 179.775109][ T7868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.784093][ T7868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.784764][ T5229] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.792861][ T7868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.813143][ T8095] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 179.906139][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.916874][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.042362][ T4094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.069190][ T4094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.102038][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.127440][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.168214][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.175371][ T4094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.224688][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.231847][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.302871][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.488518][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 180.566489][ T5245] Bluetooth: hci3: command tx timeout [ 180.674214][ T8] usb 4-1: config 0 has no interfaces? [ 180.680387][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 180.693467][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.762030][ T8] usb 4-1: config 0 descriptor?? [ 181.064842][ T5348] usb 4-1: USB disconnect, device number 8 [ 181.245961][ T7965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.428899][ T7965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.545314][ T7965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.609901][ T7965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.849985][ T5245] Bluetooth: hci2: command tx timeout [ 181.982859][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.155785][ T7934] veth0_vlan: entered promiscuous mode [ 182.170020][ T7934] veth1_vlan: entered promiscuous mode [ 182.181971][ T8142] loop3: detected capacity change from 0 to 256 [ 182.195126][ T8142] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119acce) [ 182.218846][ T8142] exFAT-fs (loop3): invalid boot region [ 182.226015][ T8142] exFAT-fs (loop3): failed to recognize exfat type [ 182.291334][ T7934] veth0_macvtap: entered promiscuous mode [ 182.321290][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.332302][ T7934] veth1_macvtap: entered promiscuous mode [ 182.357779][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.373081][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.397598][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.428385][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.438278][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.449356][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.461219][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.472308][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.488261][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.498988][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.512003][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.564774][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.585534][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.602932][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.626508][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.660666][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.716720][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.878464][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.912821][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.011653][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.098926][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.109853][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.122482][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.146393][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.153550][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.181210][ T7934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.197317][ T7934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.220175][ T7934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.243393][ T7934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.257210][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.264347][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.303912][ T7965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.314458][ T7965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.463109][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.466163][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.488387][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.544954][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.601605][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.702285][ T7965] veth0_vlan: entered promiscuous mode [ 183.728189][ T7965] veth1_vlan: entered promiscuous mode [ 183.757168][ T8190] loop2: detected capacity change from 0 to 512 [ 183.793938][ T8190] EXT4-fs: Ignoring removed orlov option [ 183.809056][ T7965] veth0_macvtap: entered promiscuous mode [ 183.816065][ T8190] ext4: Bad value for 'sb' [ 183.826815][ T7965] veth1_macvtap: entered promiscuous mode [ 183.873149][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.887664][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.927642][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.955930][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.970192][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.995105][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.052780][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.097856][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.127134][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.175195][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.227134][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.265081][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.284712][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.297431][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.328595][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.354940][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.384695][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.408435][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.424210][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.437765][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.475514][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.498177][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.515247][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.530856][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.553306][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.572573][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.597125][ T7965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.621266][ T7965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.632325][ T7965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.641520][ T7965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.757780][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.782043][ T8225] loop4: detected capacity change from 0 to 512 [ 184.792267][ T8225] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.864270][ T8225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 184.871667][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.891737][ T8225] System zones: 1-12 [ 184.907997][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.917413][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.943500][ T8225] EXT4-fs (loop4): 1 truncate cleaned up [ 184.950235][ T8225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.060614][ T8225] loop4: detected capacity change from 512 to 64 [ 185.103201][ T8235] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -12) [ 185.750731][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 185.772202][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 185.891001][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 185.942520][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 185.991995][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 186.043152][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 186.077611][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 186.130762][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 186.187441][ T6886] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 186.483878][ T8272] cgroup: fork rejected by pids controller in /syz3 [ 186.609740][ T6886] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.094886][ T8267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.434908][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.550718][ T8356] loop1: detected capacity change from 0 to 2048 [ 187.657539][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.797316][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.810791][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.821919][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 188.050685][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.220830][ T8356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.568842][ T8372] overlayfs: failed to resolve './file0': -2 [ 188.833468][ T8371] loop0: detected capacity change from 0 to 2048 [ 188.849844][ T8371] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 188.885316][ T8371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.901239][ T8349] chnl_net:caif_netlink_parms(): no params data found [ 189.177075][ T7965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.823372][ T8389] loop3: detected capacity change from 0 to 64 [ 189.906695][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.913880][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.921845][ T8349] bridge_slave_0: entered allmulticast mode [ 189.928776][ T8349] bridge_slave_0: entered promiscuous mode [ 189.936652][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.963789][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.971946][ T8349] bridge_slave_1: entered allmulticast mode [ 189.978943][ T8349] bridge_slave_1: entered promiscuous mode [ 190.064028][ T8349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.075379][ T8349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.144212][ T8349] team0: Port device team_slave_0 added [ 190.153477][ T8349] team0: Port device team_slave_1 added [ 190.172238][ T5249] Bluetooth: hci4: command tx timeout [ 190.581407][ T8349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.615349][ T8349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.748987][ T8349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.862200][ T8349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.919057][ T8349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.045415][ T8349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.181529][ T8409] netlink: 'syz.0.708': attribute type 3 has an invalid length. [ 191.202737][ T8409] netlink: 'syz.0.708': attribute type 3 has an invalid length. [ 191.374110][ T8349] hsr_slave_0: entered promiscuous mode [ 191.392557][ T8349] hsr_slave_1: entered promiscuous mode [ 191.408117][ T8349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.431172][ T8349] Cannot create hsr debugfs directory [ 191.649205][ T8349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.742153][ T8349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.842235][ T8349] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.925593][ T8349] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.821497][ T5249] Bluetooth: hci4: command tx timeout [ 192.924058][ T8349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.974026][ T8349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.123396][ T8349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.302782][ T8349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.546065][ T8349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.627129][ T8349] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.646255][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.653429][ T5704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.691634][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.698878][ T5704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.508668][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514999][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.720287][ T8349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.329992][ T5249] Bluetooth: hci4: command tx timeout [ 200.276093][ T8349] veth0_vlan: entered promiscuous mode [ 200.290503][ T8349] veth1_vlan: entered promiscuous mode [ 201.358913][ T5249] Bluetooth: hci4: command tx timeout [ 201.410594][ T8349] veth0_macvtap: entered promiscuous mode [ 201.459668][ T8349] veth1_macvtap: entered promiscuous mode [ 201.472976][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.483522][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.493391][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.503862][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.514619][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.517620][ T8483] loop3: detected capacity change from 0 to 8 [ 201.531999][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.541926][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.552844][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.563223][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.573704][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.575560][ T8483] unable to read xattr id index table [ 201.583545][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.583564][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.583579][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.583590][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.584533][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.639279][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.649906][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.660438][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.671203][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.681011][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.691448][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.701327][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.711803][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.721929][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.732436][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.742320][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.752772][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.763255][ T8349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.774410][ T8349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.807570][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.817066][ T8349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.825900][ T8349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.834824][ T8349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.843788][ T8349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.019566][ T8492] netlink: 'syz.1.733': attribute type 11 has an invalid length. [ 202.369220][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.396021][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.419306][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.427434][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.970591][ T8502] overlayfs: failed to resolve './file1': -2 [ 203.324106][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.341211][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.351908][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.360300][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.367782][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.194329][ T5245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.814988][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 205.137095][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.164722][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.179043][ T8498] bridge_slave_0: entered allmulticast mode [ 205.205399][ T8498] bridge_slave_0: entered promiscuous mode [ 205.259223][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.277799][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.335824][ T8498] bridge_slave_1: entered allmulticast mode [ 205.374154][ T8498] bridge_slave_1: entered promiscuous mode [ 205.393668][ T5704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.558038][ T8538] loop1: detected capacity change from 0 to 512 [ 205.619878][ T5704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.901539][ T8535] netlink: 'syz.4.741': attribute type 3 has an invalid length. [ 205.934249][ T8535] netlink: 'syz.4.741': attribute type 3 has an invalid length. [ 205.951275][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.990923][ T5704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.021818][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.076101][ T5704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.108006][ T8498] team0: Port device team_slave_0 added [ 206.123117][ T8498] team0: Port device team_slave_1 added [ 206.256008][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.264877][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.329991][ T5249] Bluetooth: hci5: command tx timeout [ 206.528445][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.678935][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.694142][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.723934][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.249594][ T8498] hsr_slave_0: entered promiscuous mode [ 207.258895][ T8498] hsr_slave_1: entered promiscuous mode [ 207.265218][ T8498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.275745][ T8498] Cannot create hsr debugfs directory [ 207.307412][ T5704] bridge_slave_1: left allmulticast mode [ 207.319999][ T5704] bridge_slave_1: left promiscuous mode [ 207.336119][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.356030][ T5704] bridge_slave_0: left allmulticast mode [ 207.369647][ T5704] bridge_slave_0: left promiscuous mode [ 207.383132][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.782470][ T5704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.172794][ T5704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.240140][ T5704] bond0 (unregistering): Released all slaves [ 208.448509][ T5249] Bluetooth: hci5: command tx timeout [ 208.743310][ T8567] loop4: detected capacity change from 0 to 2048 [ 208.754073][ T8567] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 208.766199][ T8567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.882436][ T8573] overlayfs: failed to resolve './file1': -2 [ 209.093603][ T5704] hsr_slave_0: left promiscuous mode [ 209.101227][ T5704] hsr_slave_1: left promiscuous mode [ 209.107138][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.119925][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.127802][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.137582][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.148678][ T5704] veth1_macvtap: left promiscuous mode [ 209.154264][ T5704] veth0_macvtap: left promiscuous mode [ 209.160404][ T5704] veth1_vlan: left promiscuous mode [ 209.165732][ T5704] veth0_vlan: left promiscuous mode [ 209.264238][ T8575] loop2: detected capacity change from 0 to 40427 [ 209.273484][ T8575] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 209.287670][ T8575] F2FS-fs (loop2): Image doesn't support compression [ 209.295870][ T8575] F2FS-fs (loop2): Unrecognized mount option "nouxtent_cache" or missing value [ 209.332277][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 209.332604][ T5704] team0 (unregistering): Port device team_slave_1 removed [ 209.357789][ T5704] team0 (unregistering): Port device team_slave_0 removed [ 209.543674][ T8591] loop1: detected capacity change from 0 to 512 [ 209.546127][ T8349] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 209.558744][ T8349] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 209.574635][ T8591] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.757: casefold flag without casefold feature [ 209.597397][ T8591] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.757: couldn't read orphan inode 15 (err -117) [ 209.612970][ T8591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.757811][ T8598] loop2: detected capacity change from 0 to 512 [ 210.192687][ T8498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.213578][ T8498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.238901][ T8498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.249648][ T8498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.322366][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.375740][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.433317][ T8609] loop2: detected capacity change from 0 to 128 [ 210.441258][ T8609] vfat: Unknown parameter 'u' [ 210.466373][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.473524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.482481][ T5247] Bluetooth: hci5: command tx timeout [ 210.517248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.524415][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.624224][ T8498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.715119][ T5704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.893344][ T5704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.921792][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.933118][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.941978][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.953420][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.961966][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.998730][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.010721][ T5704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.087956][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.114546][ T8498] veth0_vlan: entered promiscuous mode [ 211.125388][ T8498] veth1_vlan: entered promiscuous mode [ 211.144197][ T8498] veth0_macvtap: entered promiscuous mode [ 211.169849][ T7965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.256957][ T8498] veth1_macvtap: entered promiscuous mode [ 211.317915][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.328557][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.338521][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.349028][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.359155][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.369706][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.379702][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.390756][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.401131][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.413965][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.423939][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.434479][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.444980][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.455817][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.470843][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.514186][ T5704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.576279][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.589490][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.627409][ T8620] loop3: detected capacity change from 0 to 32768 [ 211.658404][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.669275][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.687917][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.706420][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.716565][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.728465][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.738478][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.749308][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.837069][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.866185][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.886276][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.937506][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.027703][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.072118][ T5229] read_mapping_page failed! [ 212.088478][ T5229] ERROR: (device loop3): txCommit: [ 212.088478][ T5229] [ 212.101809][ T5229] read_mapping_page failed! [ 212.106370][ T5229] ERROR: (device loop3): txCommit: [ 212.106370][ T5229] [ 212.137753][ T8498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.147127][ T8498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.167369][ T8498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.176868][ T8498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.193249][ T6043] ERROR: (device loop3): diFree: numfree > numinos [ 212.193249][ T6043] [ 212.210671][ T113] ERROR: (device loop3): diFree: numfree > numinos [ 212.210671][ T113] [ 212.291026][ T8638] loop2: detected capacity change from 0 to 1764 [ 212.479060][ T5249] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 212.485354][ T5249] Bluetooth: hci0: command 0x0406 tx timeout [ 212.525597][ T5704] bridge_slave_1: left allmulticast mode [ 212.536228][ T5704] bridge_slave_1: left promiscuous mode [ 212.558569][ T5249] Bluetooth: hci5: command tx timeout [ 213.017838][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.043235][ T5704] bridge_slave_0: left allmulticast mode [ 213.049990][ T5249] Bluetooth: hci3: command tx timeout [ 213.050635][ T5704] bridge_slave_0: left promiscuous mode [ 213.071193][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.117662][ T8653] loop2: detected capacity change from 0 to 1024 [ 213.931923][ T5704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.945307][ T5704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.962698][ T5704] bond0 (unregistering): Released all slaves [ 214.322746][ T8625] chnl_net:caif_netlink_parms(): no params data found [ 214.851719][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.867871][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.875585][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.886668][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.894249][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.904307][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.987788][ T8684] binder: 8678:8684 unknown command 0 [ 214.993296][ T8684] binder: 8678:8684 ioctl c0306201 200001c0 returned -22 [ 215.127799][ T5249] Bluetooth: hci3: command tx timeout [ 215.412941][ T5704] hsr_slave_0: left promiscuous mode [ 215.418799][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.432935][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.901781][ T5704] hsr_slave_1: left promiscuous mode [ 215.907720][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.916230][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.931703][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.943018][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.968573][ T5704] veth1_macvtap: left promiscuous mode [ 215.974118][ T5704] veth0_macvtap: left promiscuous mode [ 215.988521][ T5704] veth1_vlan: left promiscuous mode [ 216.001634][ T5704] veth0_vlan: left promiscuous mode [ 216.124897][ T8691] loop2: detected capacity change from 0 to 1024 [ 216.574391][ T5704] team0 (unregistering): Port device team_slave_1 removed [ 216.593118][ T5704] team0 (unregistering): Port device team_slave_0 removed [ 216.700452][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.715806][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.723621][ T8625] bridge_slave_0: entered allmulticast mode [ 216.730893][ T8625] bridge_slave_0: entered promiscuous mode [ 216.802470][ T8700] overlayfs: failed to resolve './file1': -2 [ 217.039020][ T5245] Bluetooth: hci0: command tx timeout [ 217.098104][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.134915][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.155936][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.193865][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.203647][ T5245] Bluetooth: hci3: command tx timeout [ 217.221951][ T8625] bridge_slave_1: entered allmulticast mode [ 217.248186][ T8625] bridge_slave_1: entered promiscuous mode [ 217.983428][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.031277][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.325258][ T8625] team0: Port device team_slave_0 added [ 218.803439][ T8625] team0: Port device team_slave_1 added [ 218.894878][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.909205][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.937505][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.952673][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.963533][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.989935][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.016157][ T8681] chnl_net:caif_netlink_parms(): no params data found [ 219.114205][ T8747] loop1: detected capacity change from 0 to 1024 [ 219.128846][ T5245] Bluetooth: hci0: command tx timeout [ 219.186217][ T8625] hsr_slave_0: entered promiscuous mode [ 219.194944][ T8625] hsr_slave_1: entered promiscuous mode [ 219.201642][ T8625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.209282][ T8625] Cannot create hsr debugfs directory [ 219.278499][ T5245] Bluetooth: hci3: command tx timeout [ 220.137362][ T5704] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.204041][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.218186][ T8757] loop2: detected capacity change from 0 to 256 [ 220.288522][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.297283][ T8681] bridge_slave_0: entered allmulticast mode [ 220.312355][ T8681] bridge_slave_0: entered promiscuous mode [ 220.339993][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.348564][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.355789][ T8681] bridge_slave_1: entered allmulticast mode [ 220.365879][ T8681] bridge_slave_1: entered promiscuous mode [ 220.385817][ T8757] FAT-fs (loop2): Directory bread(block 64) failed [ 220.396812][ T5704] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.691949][ T8757] FAT-fs (loop2): Directory bread(block 65) failed [ 220.700509][ T8757] FAT-fs (loop2): Directory bread(block 66) failed [ 220.707616][ T8757] FAT-fs (loop2): Directory bread(block 67) failed [ 220.718467][ T8757] FAT-fs (loop2): Directory bread(block 68) failed [ 220.725303][ T8757] FAT-fs (loop2): Directory bread(block 69) failed [ 220.741479][ T8757] FAT-fs (loop2): Directory bread(block 70) failed [ 220.750214][ T8757] FAT-fs (loop2): Directory bread(block 71) failed [ 220.761099][ T8757] FAT-fs (loop2): Directory bread(block 72) failed [ 220.768071][ T8757] FAT-fs (loop2): Directory bread(block 73) failed [ 221.217598][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.227582][ T5245] Bluetooth: hci0: command tx timeout [ 221.457385][ T5704] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.516979][ T8783] netlink: 212 bytes leftover after parsing attributes in process `syz.0.791'. [ 221.528323][ T8783] unsupported nla_type 65535 [ 221.947587][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.383224][ T5704] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.453482][ T8681] team0: Port device team_slave_0 added [ 222.470118][ T8681] team0: Port device team_slave_1 added [ 222.556920][ T8794] netlink: 92 bytes leftover after parsing attributes in process `syz.0.794'. [ 222.718968][ T5704] bridge_slave_1: left allmulticast mode [ 222.726126][ T5704] bridge_slave_1: left promiscuous mode [ 222.735451][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.764338][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.794'. [ 222.792496][ T5704] bridge_slave_0: left allmulticast mode [ 222.836508][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'. [ 222.863509][ T5704] bridge_slave_0: left promiscuous mode [ 222.913728][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.919391][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.794'. [ 222.932398][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.794'. [ 223.076777][ T5704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.089091][ T5704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.101898][ T5704] bond0 (unregistering): Released all slaves [ 223.111927][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.120131][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.146846][ T8681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.181365][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.193165][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.245467][ T8681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.282501][ T5245] Bluetooth: hci0: command tx timeout [ 223.354234][ T8818] loop0: detected capacity change from 0 to 1024 [ 223.458080][ T8681] hsr_slave_0: entered promiscuous mode [ 223.472052][ T8681] hsr_slave_1: entered promiscuous mode [ 223.479300][ T8681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.486870][ T8681] Cannot create hsr debugfs directory [ 223.519066][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.575171][ T8821] loop0: detected capacity change from 0 to 16 [ 223.612005][ T8821] erofs: DAX unsupported by block device. Turning off DAX. [ 223.650843][ T8821] erofs: (device loop0): mounted with root inode @ nid 36. [ 223.688346][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 223.703861][ T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 223.712172][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 223.731238][ T5704] hsr_slave_0: left promiscuous mode [ 223.742179][ T8816] loop1: detected capacity change from 0 to 32768 [ 223.742432][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 223.758984][ T5704] hsr_slave_1: left promiscuous mode [ 223.769746][ T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 223.771380][ T8816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.797 (8816) [ 223.779607][ T8] usb 3-1: Product: syz [ 223.806498][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.814460][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.821823][ T8] usb 3-1: Manufacturer: syz [ 223.826927][ T8] usb 3-1: SerialNumber: syz [ 223.837381][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.845274][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.856992][ T8] usb 3-1: config 0 descriptor?? [ 223.863998][ T8] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 223.893754][ T5704] veth1_macvtap: left promiscuous mode [ 223.903378][ T8] ldusb 3-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 223.921548][ T5704] veth0_macvtap: left promiscuous mode [ 223.931759][ T5704] veth1_vlan: left promiscuous mode [ 223.939163][ T5704] veth0_vlan: left promiscuous mode [ 223.944458][ T8816] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.019151][ T8816] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 224.027966][ T8816] BTRFS info (device loop1): using free-space-tree [ 224.400703][ T5285] usb 3-1: USB disconnect, device number 6 [ 224.473478][ T5285] ldusb 3-1:0.0: LD USB Device #2 now disconnected [ 224.531809][ T8816] BTRFS info (device loop1): rebuilding free space tree [ 224.646308][ T7965] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.693313][ T5704] team0 (unregistering): Port device team_slave_1 removed [ 224.836419][ T5704] team0 (unregistering): Port device team_slave_0 removed [ 225.315285][ T8625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.340211][ T8625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.357521][ T8625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.770905][ T8625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.158701][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.172393][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.194164][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.201342][ T8715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.265550][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.272701][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.337745][ T8625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.348355][ T8625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.384406][ T8880] loop2: detected capacity change from 0 to 128 [ 226.999489][ T8681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.121001][ T8681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.331895][ T8681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.475497][ T8681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.579575][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.988222][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.177327][ T8681] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.205038][ T8681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.215459][ T8681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.234463][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.241632][ T4094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.302547][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.309681][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.862820][ T8929] loop2: detected capacity change from 0 to 1024 [ 228.896599][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.950709][ T8681] veth0_vlan: entered promiscuous mode [ 228.964753][ T8681] veth1_vlan: entered promiscuous mode [ 228.984855][ T8681] veth0_macvtap: entered promiscuous mode [ 228.994347][ T8681] veth1_macvtap: entered promiscuous mode [ 229.423310][ T8625] veth0_vlan: entered promiscuous mode [ 229.437773][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.462972][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.478618][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.503706][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.519484][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.545708][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.606971][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.627655][ T8942] loop0: detected capacity change from 0 to 256 [ 229.635852][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.724343][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.738385][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.758563][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.782095][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.194331][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.238187][ T8625] veth1_vlan: entered promiscuous mode [ 230.648889][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.665870][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.690083][ T8951] loop2: detected capacity change from 0 to 256 [ 230.758990][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.776387][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 230.777290][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.795788][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'. [ 230.801146][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.816955][ T8960] loop1: detected capacity change from 0 to 512 [ 230.818460][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.836178][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.839422][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 230.848540][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.879053][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 230.886796][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.912747][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.935796][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.947619][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.948903][ T8960] EXT4-fs (loop1): Test dummy encryption mode enabled [ 230.959912][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.994539][ T8625] veth0_macvtap: entered promiscuous mode [ 231.007166][ T8960] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.818: corrupted in-inode xattr: invalid ea_ino [ 231.015317][ T8625] veth1_macvtap: entered promiscuous mode [ 231.024711][ T8960] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.818: couldn't read orphan inode 12 (err -117) [ 231.032546][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.049096][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.059576][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.070067][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.079979][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.085623][ T8972] loop2: detected capacity change from 0 to 256 [ 231.090561][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.090582][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.090597][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.105908][ T8972] msdos: Bad value for 'errors' [ 231.106638][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.140756][ T8960] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.142762][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.165869][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.176716][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.186813][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.197467][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.210357][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.347668][ T8681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.361506][ T8681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.371110][ T8681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.586693][ T8681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.780506][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.801819][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.835135][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.845712][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.855720][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.866894][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.876885][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.888096][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.898333][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.908914][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.918811][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.929472][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.948246][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.959099][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.974954][ T7965] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 231.975273][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.146970][ T8980] ./file0: Can't lookup blockdev [ 232.414475][ T8625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.443912][ T8625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.548478][ T8625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.557481][ T8625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.456693][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.490023][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.564346][ T4094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.591716][ T4094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.609892][ T9005] loop0: detected capacity change from 0 to 512 [ 235.086899][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.109936][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.216531][ T5704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.228499][ T5704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.324681][ T9017] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 235.436555][ T9021] loop0: detected capacity change from 0 to 2048 [ 235.522861][ T8995] loop1: detected capacity change from 0 to 32768 [ 235.530578][ T8995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.822 (8995) [ 235.607695][ T9021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.626221][ T8995] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.637638][ T8995] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 236.561343][ T8995] BTRFS info (device loop1): using free-space-tree [ 236.570282][ T8498] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.570742][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 236.589101][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 236.598893][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 236.608946][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 236.619029][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 236.628025][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 236.667289][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 236.689205][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 236.722155][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 236.800903][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 236.871741][ T9067] loop3: detected capacity change from 0 to 512 [ 236.873026][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 236.892199][ T8995] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 236.902416][ T9067] ext4: Unknown parameter 'appraise_type' [ 236.927018][ T9061] loop2: detected capacity change from 0 to 256 [ 236.941724][ T8995] BTRFS error (device loop1): open_ctree failed [ 237.763257][ T9095] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 237.772863][ T9095] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 238.095026][ T9093] loop2: detected capacity change from 0 to 1024 [ 238.140137][ T9093] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 238.601864][ T9093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.793692][ T9111] overlayfs: failed to resolve './file1': -2 [ 239.320188][ T9093] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.2.834: corrupted in-inode xattr: bad e_name length [ 239.476845][ T9117] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #2: comm syz.2.834: corrupted in-inode xattr: bad e_name length [ 239.614949][ T9121] netlink: 'syz.0.839': attribute type 4 has an invalid length. [ 239.666129][ T9122] loop3: detected capacity change from 0 to 16 [ 239.676544][ T9122] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.061541][ T7868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.772508][ T9156] loop1: detected capacity change from 0 to 256 [ 241.147366][ T9156] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 241.213479][ T9149] syzkaller0: entered allmulticast mode [ 241.219873][ T9158] loop3: detected capacity change from 0 to 2048 [ 241.244683][ T9158] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 241.361051][ T9158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.725168][ T9196] loop3: detected capacity change from 0 to 1024 [ 243.762460][ T9196] hfsplus: Bad value for 'session' [ 243.827698][ T9200] loop4: detected capacity change from 0 to 1024 [ 244.245124][ T9220] loop0: detected capacity change from 0 to 256 [ 244.549580][ T9220] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.564534][ T9214] loop3: detected capacity change from 0 to 8192 [ 246.407507][ T9245] loop2: detected capacity change from 0 to 512 [ 246.531730][ T9245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.598383][ T9245] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.861: bg 0: block 216: padding at end of block bitmap is not set [ 246.822796][ T7868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.905820][ T9257] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 248.995423][ T9286] loop1: detected capacity change from 0 to 512 [ 249.023123][ T9286] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.023547][ T9280] loop3: detected capacity change from 0 to 2048 [ 249.044942][ T9280] udf: Bad value for 'session' [ 249.061869][ T9286] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.201839][ T9292] binder_alloc: 9283: binder_alloc_buf, no vma [ 250.032422][ T9286] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.871: corrupted in-inode xattr: e_value out of bounds [ 250.099320][ T9286] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.871: couldn't read orphan inode 15 (err -117) [ 250.249156][ T9286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.849199][ T9308] loop0: detected capacity change from 0 to 1024 [ 251.322658][ T9308] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 251.336626][ T7965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.337820][ T9308] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 251.355463][ T9308] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 251.365911][ T9308] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.875: inode #1: comm syz.0.875: iget: illegal inode # [ 251.380342][ T9308] EXT4-fs (loop0): no journal found [ 251.380381][ T9308] EXT4-fs (loop0): can't get journal size [ 251.644748][ T9308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.686242][ T9331] loop3: detected capacity change from 0 to 256 [ 252.879162][ T8498] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.915654][ T9331] FAT-fs (loop3): Directory bread(block 64) failed [ 253.323305][ T9331] FAT-fs (loop3): Directory bread(block 65) failed [ 253.335415][ T9331] FAT-fs (loop3): Directory bread(block 66) failed [ 253.342524][ T9331] FAT-fs (loop3): Directory bread(block 67) failed [ 253.350554][ T9331] FAT-fs (loop3): Directory bread(block 68) failed [ 253.357691][ T9331] FAT-fs (loop3): Directory bread(block 69) failed [ 253.364962][ T9331] FAT-fs (loop3): Directory bread(block 70) failed [ 253.372460][ T9331] FAT-fs (loop3): Directory bread(block 71) failed [ 253.380041][ T9331] FAT-fs (loop3): Directory bread(block 72) failed [ 253.386884][ T9331] FAT-fs (loop3): Directory bread(block 73) failed [ 254.261746][ T9348] bridge1: entered promiscuous mode [ 254.267155][ T9348] bridge1: entered allmulticast mode [ 254.279630][ T9348] team0: Port device bridge1 added [ 254.451826][ T9356] loop3: detected capacity change from 0 to 1024 [ 254.464080][ T9356] hfsplus: Unknown parameter 'õ%Bfµ£(oаÌg-0„ÚŽºƒ¾áÙž—^’X`TA™CÆÝü"›Ó¹œá°éz£žf‚u¤w' [ 255.356795][ T9356] loop3: detected capacity change from 0 to 256 [ 255.371672][ T9356] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 255.915579][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 256.201331][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.212289][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.541216][ T9378] loop0: detected capacity change from 0 to 1024 [ 256.903351][ T9377] loop1: detected capacity change from 0 to 2048 [ 256.970945][ T9377] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 257.014030][ T9378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.039558][ T9377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.066427][ T9385] loop3: detected capacity change from 0 to 128 [ 257.104882][ T9385] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.117471][ T9385] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.229778][ T8498] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.205416][ T9397] loop0: detected capacity change from 0 to 1024 [ 258.249022][ T8681] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.325084][ T9399] loop2: detected capacity change from 0 to 512 [ 258.357888][ T9399] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 258.665900][ T9397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.201563][ T29] audit: type=1800 audit(1728390572.943:28): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.897" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 259.800289][ T9420] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 260.560396][ T9428] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 260.575479][ T9428] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 260.587718][ T9428] EXT4-fs (loop0): This should not happen!! Data will be lost [ 260.587718][ T9428] [ 260.597405][ T9428] EXT4-fs (loop0): Total free blocks count 0 [ 260.604261][ T9428] EXT4-fs (loop0): Free/Dirty block details [ 260.610495][ T9428] EXT4-fs (loop0): free_blocks=68451041280 [ 260.616345][ T9428] EXT4-fs (loop0): dirty_blocks=64 [ 260.621525][ T9428] EXT4-fs (loop0): Block reservation details [ 260.627515][ T9428] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 260.633854][ T9428] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 261.220203][ T5472] bridge_slave_1: left allmulticast mode [ 261.295459][ T5472] bridge_slave_1: left promiscuous mode [ 261.368656][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.435877][ T9442] loop4: detected capacity change from 0 to 512 [ 261.501028][ T5472] bridge_slave_0: left allmulticast mode [ 261.506832][ T5472] bridge_slave_0: left promiscuous mode [ 261.508455][ T9442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.516537][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.656435][ T9447] nbd: must specify at least one socket [ 262.447867][ T9442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 262.471652][ T9442] System zones: 1-12 [ 262.491347][ T9442] EXT4-fs (loop4): 1 truncate cleaned up [ 262.515484][ T9442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.618022][ T9451] loop3: detected capacity change from 0 to 1024 [ 262.868477][ T9457] syz.4.906 (pid 9457) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 264.633690][ T5472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.682005][ T8625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.848426][ T5472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.886767][ T5472] bond0 (unregistering): Released all slaves [ 265.139718][ T5472] hsr_slave_0: left promiscuous mode [ 265.141367][ T5472] hsr_slave_1: left promiscuous mode [ 265.142108][ T5472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.142260][ T5472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.144708][ T5472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.144734][ T5472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.146540][ T5472] veth1_macvtap: left promiscuous mode [ 265.146568][ T5472] veth0_macvtap: left promiscuous mode [ 265.146620][ T5472] veth1_vlan: left promiscuous mode [ 265.146661][ T5472] veth0_vlan: left promiscuous mode [ 266.357591][ T5472] team0 (unregistering): Port device team_slave_1 removed [ 266.366897][ T5472] team0 (unregistering): Port device team_slave_0 removed [ 269.967242][ T9489] loop1: detected capacity change from 0 to 256 [ 271.016492][ T9489] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 274.038504][ T30] INFO: task kworker/0:3:5230 blocked for more than 144 seconds. [ 274.046233][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 275.227728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.243492][ T30] task:kworker/0:3 state:D stack:22320 pid:5230 tgid:5230 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.348317][ T30] Workqueue: usb_hub_wq hub_event [ 276.353390][ T30] Call Trace: [ 276.356655][ T30] [ 277.385432][ T30] __schedule+0x1895/0x4b30 [ 277.395616][ T30] ? try_to_wake_up+0x98b/0x14b0 [ 277.400873][ T30] ? schedule+0x90/0x320 [ 277.405142][ T30] ? schedule+0x90/0x320 [ 277.409730][ T30] ? schedule+0x90/0x320 [ 277.413988][ T30] ? lock_release+0xbf/0xa30 [ 277.419438][ T30] ? __pfx___schedule+0x10/0x10 [ 277.424312][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 277.429790][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.436028][ T30] ? kick_pool+0x45c/0x620 [ 277.759676][ T30] ? schedule+0x90/0x320 [ 278.778330][ T30] ? rcu_is_watching+0x15/0xb0 [ 278.783122][ T30] ? schedule+0x90/0x320 [ 278.787348][ T30] schedule+0x14b/0x320 [ 278.806795][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.020873][ T30] __mutex_lock+0x6a7/0xd70 [ 280.034757][ T30] ? put_rng+0x1a/0xe0 [ 280.039030][ T30] ? __mutex_lock+0x52a/0xd70 [ 280.043700][ T30] ? chaoskey_disconnect+0xb2/0x270 [ 280.050072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.055139][ T30] ? hwrng_unregister+0x31b/0x3a0 [ 280.061877][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.070095][ T30] ? chaoskey_disconnect+0x82/0x270 [ 280.075301][ T30] chaoskey_disconnect+0xb2/0x270 [ 280.080764][ T30] usb_unbind_interface+0x25e/0x940 [ 280.085958][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 280.094496][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.101666][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.110139][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.117333][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.125059][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.134078][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 280.140333][ T30] device_release_driver_internal+0x503/0x7c0 [ 280.146403][ T30] bus_remove_device+0x34f/0x420 [ 280.152770][ T30] device_del+0x57a/0x9b0 [ 280.157096][ T30] ? kobject_put+0x272/0x480 [ 280.161906][ T30] ? __pfx_device_del+0x10/0x10 [ 280.166747][ T30] ? kobject_put+0x44d/0x480 [ 280.172688][ T30] usb_disable_device+0x3bf/0x850 [ 280.177722][ T30] usb_disconnect+0x340/0x950 [ 280.215174][ T30] hub_event+0x1ebc/0x5150 [ 280.219936][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.225128][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.242953][ T30] ? __pfx_hub_event+0x10/0x10 [ 280.247744][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 280.275463][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 280.284167][ T9498] chnl_net:caif_netlink_parms(): no params data found [ 280.291058][ T30] ? lockdep_stack_trace_count+0x20/0xb0 [ 280.296687][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 280.314178][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.322757][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.327531][ T30] ? process_scheduled_works+0x976/0x1850 [ 280.333530][ T30] process_scheduled_works+0xa63/0x1850 [ 280.341086][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.347072][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 280.352867][ T30] ? assign_work+0x364/0x3d0 [ 280.357460][ T30] worker_thread+0x870/0xd30 [ 280.363587][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 280.370153][ T30] ? __kthread_parkme+0x169/0x1d0 [ 280.375206][ T30] ? __pfx_worker_thread+0x10/0x10 [ 281.394671][ T30] kthread+0x2f0/0x390 [ 281.399553][ T30] ? __pfx_worker_thread+0x10/0x10 [ 281.404975][ T30] ? __pfx_kthread+0x10/0x10 [ 281.410963][ T30] ret_from_fork+0x4b/0x80 [ 281.415379][ T30] ? __pfx_kthread+0x10/0x10 [ 281.420364][ T30] ret_from_fork_asm+0x1a/0x30 [ 281.426716][ T30]